Critical vulnerability
Critical remote code execution in the payever – WooCommerce Gateway WordPress plugin (CVE-2026-93754)
Remote code execution in payever – WooCommerce Gateway · WordPress plugins
CVE-2026-93754
payever – WooCommerce Gateway <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution
- Severity
- Critical 9.8
- Published
- 7 Nov 2026
| Software | Affected versions |
|---|---|
| Payever Woocommerce Gateway (WordPress plugin)WordPress plugins |
|
- CVE.org https://www.cve.org/CVERecord?id=CVE-2026-93754
From NVD, the CVE Program, OSV.dev with the GitHub Advisory Database, WPVulnerability, WordPress's security advisories and CISA's Known Exploited Vulnerabilities catalog, as they stood when this was written. Each vulnerability's own page has its latest rating and fix. This product uses the NVD API but is not endorsed or certified by the NVD.