CryptoPayment Gateway CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

CRITICAL CryptoPayment Gateway CVE published 2026-09-13

CVE-2026-81648

The CryptoPayment Gateway WordPress plugin, versions 1.2.1 to 1.2.2, has a critical vulnerability allowing unauthenticated users to perform administrative operations. These operations include deleting arbitrary files on the server, overwriting payment gateway configurations, and recovering stored wallet credentials in cleartext. This vulnerability has a critical CVSS score of 10, indicating the highest se [truncated]