Security
Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials
The Hacker News·November 3, 2026·1 min read
Threat actors are exploiting an unpatched maximum-severity vulnerability in the CryptoPayment Gateway WordPress plugin, tracked as CVE-2026-81648 with a CVSS score of 10.0, according to Defused Cyber. Successful exploitation allows unauthenticated users to delete arbitrary files on the server and extract wallet credentials, posing a serious risk to cryptocurrency transactions.
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.