Skip to content
Critical Flaw in CryptoPayment Gateway Exploited by Attackers

Critical Flaw in CryptoPayment Gateway Exploited by Attackers

First seen 3 Nov 2026, 21:53 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 3, 2026 at 22:46 UTC
  • •CVE-2026-81648 is a critical vulnerability with a CVSS score of 10.0.
  • •The flaw allows unauthorized access to sensitive wallet credentials and server file deletion.
  • •No patches are available, and the plugin has been removed from the WordPress directory.

Defused Cyber has reported attempts to exploit a critical vulnerability in the CryptoPayment Gateway WordPress plugin, tracked as CVE-2026-81648, which has a CVSS score of 10.0. The flaw affects versions 1.2.1 through 1.2.2 and allows unauthenticated users to delete files, alter payment settings, and retrieve wallet credentials. The plugin was removed from the WordPress Plugin Directory on August 28, 2026, due to security concerns, and no patches are currently available. Attackers are leveraging infrastructure marketed as 'Anonymous KYC-Free VPS Hosting' for their exploits. As of now, there are no confirmed reports of compromised merchants or stolen funds, but site owners are advised to remove the plugin and rotate wallet keys.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 6h ago How this analysis works

Timeline

2026-08-28
Plugin removed from WordPress directory
The CryptoPayment Gateway plugin was removed due to an unspecified security issue.
The Hacker News
2026-09-13
CVE-2026-81648 published
The vulnerability in the CryptoPayment Gateway plugin was published with a CVSS score of 10.0.
The Hacker News
2026-09-20
First public PoC released
Proof-of-concept code for CVE-2026-81648 was made publicly available.
Tokenpost

More articles in this cluster (5)

Following this threat?

Track CVE-2026-81648 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 3

Common questions

Which versions of the plugin are affected?
Versions 1.2.1 through 1.2.2 of the CryptoPayment Gateway plugin are affected.
Is there a patch available for this vulnerability?
No, there are currently no patches available for CVE-2026-81648.
What actions should site owners take?
Site owners should remove the plugin, rotate wallet keys, and audit for any suspicious changes.