CVE-2026-93754

The payever – WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in various versions up to, and including, 4.8.0. Three WooCommerce-API callbacks payeversetsandboxapikeys, payevertogglesubscription, payeversynchronizationincoming are...