Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

Threat actors are exploiting a severe security vulnerability in the CryptoPayment Gateway WordPress plugin. The vulnerability, identified as CVE-2026-81648, has a CVSS score of 10.0, indicating a high level of severity. If successfully exploited, the flaw could allow unauthenticated users to delete files on the server and extract sensitive information. This could potentially expose wallet credentials, posing a significant risk to users of the plugin. The vulnerability remains unpatched, making it a target for malicious actors. Successful exploitation could have serious consequences for the security of user data.