SecurityThe Hacker Newsabout 2 hours ago
Hackers Exploit Unpatched CryptoPayment Plugin
1 min read
Threat actors exploit CVE-2026-81648 in the CryptoPayment Gateway WordPress plugin version 1.2.1 to 1.2.2, allowing unauthenticated users to steal wallet credentials. The plugin, downloaded 1,845 times, was closed on August 28, 2026, due to the critical flaw with a CVSS score of 10.0.
Level
Hype check
Tap to vote and see what everyone thinks.
