Paper/Archive/CVE-2026-81648

CVE-2026-81648

Unknown CryptoPayment Gateway — CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router

EPSS 0.5%CVSS 10.0

critical.is priorityof 100

CVSS 10.0 (CNA)10.0 / 10 × 3030.0 Not in CISA KEV+300.0 EPSS percentile 42.7.427 × 208.5 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated users to invoke administrative operations, including deleting arbitrary files on the server, overwriting the payment gateway configuration and recovering stored wallet credentials in cleartext.

Affected

ProductAffectedFixed inSource

CryptoPayment Gateway1.2.1 – 1.2.2–CNA

Scores by source

WPScan (CNA)10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

exploitwpscan.com/vulnerability/9b1490a0-1381-4d22-8086-f75aade4e898