News
ai Working collaboratively to fight scams in Asia Pacific - Google - Gemini & AI cybersecurity Cyber chief: UK facing AI-powered attacks on critical infrastructure within two years - NCSC UK cybersecurity Critical Linux Kernel Memory Corruption Flaw Exploited to Bypass SELinux Security Controls - CyberPress cybersecurity Synology NAS Devices Targeted in Ransomware Attacks Exploiting Patched DSM Flaw - The Hacker News cybersecurity Google Announces $250,000 Bug Bounty for Critical Cloud Security Vulnerabilities - CyberPress threat-intel 5-Year-Old Linux Kernel Vulnerability Allows Unprivileged Attackers to Gain Root Access - GBHackers threat-intel DarkBlinders APT Hackers Target Israel and Iraqi Kurdistan With StarkMeet Malware and GitHub-Based Backdoors - GBHackers cybersecurity Critical Langflow AI Vulnerabilities Allow Hackers to Bypass Authentication and Execute Remote Code - CyberPress threat-intel Google Offers $250,000 Bug Bounty for Full Google Cloud Project Takeover Vulnerabilities - GBHackers threat-intel Critical Langflow AI Vulnerabilities Allow Hackers to Execute Remote Code Without Authentication - GBHackers cybersecurity Google Dismantles XCPE Botnet That Infected 1.3 Million Android TV Devices With Malware - CyberPress cybersecurity Hackers Use Fake Diplomatic Documents to Install PapRAT Malware and Spy on Windows Users - CyberPress threat-intel Hackers Hide PapRAT Malware in Fake Diplomatic Invitations to Take Control of Windows Systems - GBHackers cybersecurity Hackers Use AI-Powered Attack Framework to Breach WorkOS and Access Customer Data - CyberPress cybersecurity Attackers Exploit Critical Siemens IoT2050 Flaw to Plant Remote Command Backdoors - The Hacker News
1 / 15
All news ›
Cybersecurity

Attackers Target Unpatched CryptoPayment Gateway Flaw That Can Expose Wallet Credentials

The Hacker News ·

Threat actors are attempting to exploit an unpatched maximum-severity security vulnerability in the CryptoPayment Gateway WordPress plugin, according to findings from Defused Cyber. The vulnerability in question is CVE-2026-81648, which carries a CVSS score of 10.0. Successful exploitation of the flaw could permit unauthenticated users to delete arbitrary files on the server and extract

Continue on The Hacker News ↗ ‹ All news Get the newsletter

The summary and image come from The Hacker News; the image is shown from their website.