Skip to content

CVE-2026-81648

CVE

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
September 19, 2026
Last Seen
November 3, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two critical vulnerabilities have been disclosed in popular WordPress plugins, affecting users of the CryptoPayment Gateway and Authorizer plugins. CVE-2026-81648 allows unauthenticated users to perform administrative actions, including file deletion and configuration overwrites, due to a lack of au...

Defused Cyber has reported attempts to exploit a critical vulnerability in the CryptoPayment Gateway WordPress plugin, tracked as CVE-2026-81648, which has a CVSS score of 10.0. The flaw affects versions 1.2.1 through 1.2.2 and allows unauthenticated users to delete files, alter payment settings, an...

Public Exploits

Checking GitHub for proof-of-concept code…