Veille CVE

Dimanche 13 septembre 2026

2 CVE sur 123

Critique 1 Élevée 44 Moyenne 53 Faible 24 Non évaluée 1 Exploitées (KEV) Tri : plus récentes
  1. CVE-2026-81648 10.0 Critique

    Unknown CryptoPayment Gateway

    The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of its AJAX endpoints, allowing unauthenticated users to invoke administrative operations, including deleting arbitrary files on the server, overwriting the payment gateway configuration and recovering stored wallet credentials in cleartext.

  2. CVE-2026-49030 – Non évaluée Rejetée

    Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.