Arbitrary File Upload Vulnerability in payever WooCommerce Gateway by WordPress

CVE-2026-93754

What is CVE-2026-93754?

The payever WooCommerce Gateway plugin for WordPress suffers from a significant security flaw where unauthenticated users can exploit improper validation in one of its API callbacks, allowing arbitrary file uploads. This vulnerability occurs due to missing authentication and capability checks on callbacks like payever_set_sandbox_api_keys and payever_toggle_subscription. Attackers can utilize the upload_image() function to upload malicious PHP files to the public uploads directory without any file type validation. Additionally, an unauthenticated identity overwrite vulnerability can be exploited, and the potential impact could allow attackers to execute remote code, compromising the affected system. Immediate actions should be taken to update the plugin to mitigate the risks associated with this vulnerability.

References