News
cybersecurity Cyberattack Hits French Blood Bank Site but No Blood Products Are Compromised - SecurityWeek cybersecurity Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws - SecurityWeek threat-intel China-Aligned Hackers Hijack Popular Sogou Keyboard Software to Secretly Install DarkVigil Malware - GBHackers threat-intel Apple to Scan Publicly Shared iCloud Photos and Files for Harmful Content Starting With iOS 27.3 - GBHackers threat-intel Hackers Develop New HYFLOCK Ransomware That Encrypts Files and Attempts to Block Recovery - GBHackers threat-intel ARTEX Hackers Used Claude Code, DeepSeek, and Grok in Attacks Targeting South Korean Banks - GBHackers cybersecurity Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day - SecurityWeek cybersecurity Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes - SecurityWeek cybersecurity Hackers Exploit Sogou Input Method Vulnerability to Install DarkVigil Spyware on Windows Computers - CyberPress cybersecurity Apple to Scan Publicly Shared iCloud Photos and Files for Harmful Content in iOS 27.3 - CyberPress cybersecurity HYFLOCK Ransomware Encryption Flaw Lets Researchers Recover Data Without a Decryption Key - CyberPress cybersecurity 5 Active Cyber Threats That Put US Enterprises at Risk in October 2026 - The Hacker News threat-intel Hackers Spread Marsalek Infostealer Through Fake Game Downloads to Steal Browser Passwords and Cookies - GBHackers cybersecurity Hackers Use ARTEX AI Framework to Target Seven South Korean Banks, Exposing Thousands of Customers - CyberPress cybersecurity OpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit Tasks - SecurityWeek
1 / 15
All news ›
Cybersecurity

CryptoPayment Gateway WordPress plugin: missing authorization flaw (CVE-2026-81648) reported exploited, no fix known · ReconX Watchtower

Pro CISO ·

A critical missing-authorization flaw (CVE-2026-81648) in the CryptoPayment Gateway WordPress plugin, versions 1.2.1 to 1.2.2, lets unauthenticated visitors delete files, change payment settings and read stored wallet credentials. VulnCheck reports active exploitation, though CISA has not listed it and no fixed version is known yet. Site owners should disable the plugin or block its AJAX file now, and treat affected sites as possibly compromised. Shodan estimates around 989,625 internet-facing WordPress servers worldwide, but how many run an affected version is unknown.

Continue on Pro CISO ↗ ‹ All news Get the newsletter