Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

T2Covered by 1 source · first reported by The Hacker News at 03 Nov, 05:34 UTC

Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the…