CVE · Critical

CVE-2026-93754 — Unrestricted Upload of File with Dangerous Type

CVE Vulnerability Type Severity Affected Fixed in Published Status
CVE-2026-93754 Unrestricted Upload of File with Dangerous Type Unrestricted Upload of File with Dangerous Type Critical 9.8 < 4.8.0 4.8.0 2026-11-07 —

CVE-2026-93754 is a Unrestricted Upload of File with Dangerous Type vulnerability in the WordPress plugin payever-woocommerce-gateway (payever-woocommerce-gateway). Versions up to and including 4.8.0 are affected; no patched version is recorded. CVSS score: 9.8 (Critical). Published 2026-11-07.

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.