{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3apayeverpayever_woocommerce_gatewaywordpress/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:payever:payever_woocommerce_gateway:*:*:*:*:*:wordpress:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2026-93754"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["payever – WooCommerce Gateway (\u003c= 4.8.0)"],"_cs_severities":["critical"],"_cs_tags":["wordpress","arbitrary-file-upload","rce","web-application-vulnerability"],"_cs_type":"advisory","_cs_vendors":["payever"],"content_html":"\u003cp\u003eThe payever - WooCommerce Gateway plugin for WordPress (versions 4.8.0 and below) is vulnerable to an arbitrary file upload flaw that leads to remote code execution (RCE). The plugin exposes three WooCommerce-API callbacks (\u003ccode\u003epayever_set_sandbox_api_keys\u003c/code\u003e, \u003ccode\u003epayever_toggle_subscription\u003c/code\u003e, \u003ccode\u003epayever_synchronization_incoming\u003c/code\u003e) that lack authentication, authorization, or nonce verification.\u003c/p\u003e\n\u003cp\u003eThe \u003ccode\u003eupload_image()\u003c/code\u003e routine within these callbacks fetches a file from a remote URL and writes it to the public WordPress uploads directory. Because the filename is derived from attacker-controlled input using \u003ccode\u003ebasename()\u003c/code\u003e before the file type is validated, an attacker can force the plugin to write an executable PHP file to the server.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn unauthenticated remote attacker can upload arbitrary PHP scripts to the web server, leading to full remote code execution.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpdate the \u0026quot;payever - WooCommerce Gateway\u0026quot; plugin to the latest available version beyond 4.8.0.\u003c/li\u003e\n\u003cli\u003eImplement access controls or WAF rules to restrict access to the WooCommerce API callbacks mentioned.\u003c/li\u003e\n\u003cli\u003eAudit the \u003ccode\u003e/wp-content/uploads/\u003c/code\u003e directory for suspicious PHP files or scripts that were uploaded recently.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-07T03:46:01Z","date_published":"2026-11-07T03:46:01Z","id":"https://feed.craftedsignal.io/briefs/2026-11-payever-rce/","summary":"The payever WooCommerce Gateway plugin for WordPress contains an arbitrary file upload vulnerability in versions 4.8.0 and earlier that allows unauthenticated remote code execution.","title":"payever - WooCommerce Gateway: Unauthenticated remote code execution (CVE-2026-93754)","url":"https://feed.craftedsignal.io/briefs/2026-11-payever-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:payever:payever_woocommerce_gateway:*:*:*:*:*:wordpress:*:*","version":"https://jsonfeed.org/version/1.1"}