{"metadata": {"vulnerability": "CVE-2026-93754", "count": 15, "kinds": {"milestone": 4, "sighting": 5, "kev": 0, "other": 6}}, "data": [{"timestamp": "2026-09-18T16:35:16.353Z", "date_only": false, "value": "2026-09-18T16:35:16.353Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-93754", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-11-06T14:23:22Z", "date_only": false, "value": "2026-11-06T14:23:22.000Z", "kind": "other", "label": "Timeline", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-93754", "field": "containers.cna.timeline.0.time", "text": "Disclosed"}, {"timestamp": "2026-11-07T02:29:10.521Z", "date_only": false, "value": "2026-11-07T02:29:10.521Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93754", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, {"timestamp": "2026-11-07T02:29:10.521Z", "date_only": false, "value": "2026-11-07T02:29:10.521Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-93754", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-11-07T02:29:10.521Z", "date_only": false, "value": "2026-11-07T02:29:10.521Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Wordfence", "record": "CVE-2026-93754", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-11-07T02:50:02.965Z", "date_only": false, "value": "2026-11-07T02:50:02.965685Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mzov6kinw42u", "record": "CVE-2026-93754", "field": "creation_timestamp", "uuid": "0f018688-59c7-4ba2-9b70-e24ae71cfeee", "content": "CVE-2026-93754 - payever checkout \u2013 composable payment gateway\nThe payever checkout plugin for WooCommerce can let anyone upload a file to your site without logging in. An attacker could place a malicious script on\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#payever #CVE #infosec", "url": "https://bsky.app/profile/stackflag.bsky.social/post/3mzov6kinw42u"}, {"timestamp": "2026-11-07T02:50:41.622Z", "date_only": false, "value": "2026-11-07T02:50:41.622457Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117572884303611434", "record": "CVE-2026-93754", "field": "creation_timestamp", "uuid": "38283e4b-e0ea-4d00-86b4-9fe35aa337ec", "content": "CVE-2026-93754 payever \u2013 WooCommerce Gateway <= 4.8.0 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution The payever \u2013 WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to remote code execution in various versions up to, and including, 4.8.0. Three WooCommerce-API callbacks (payever_set_sandbox_api_keys, payever_toggle_subscription, payever_synchronization_incoming) are registered with no authentication, capability check, or nonce, and the upload_image() routine writes a remotely fetched file to the public uploads directory using an attacker-controlled basename() BEFORE validating the file type. This makes it possible for unauthenticated attackers to write an executable PHP file and achieve remote code execution. NOTE: the token-recovery leg of the full chain depends on the plugin's outbound validateToken() call to Payever's service; the unauthenticated hard-coded-credential identity overwrite (CWE-862/CWE-798) is independently exploitable.\nhttps://www.cve.org/CVERecord?id=CVE-2026-93754https://www.wordfence.com/threat-intel/vulnerabilities/id/03412063-d73a-4c5c-8dc6-3e76a5d975a5?source=cvehttps://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/class-payever-synchronization.php?rev=3647773#L22https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/class-payever-synchronization.php?rev=3647773#L116https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/woocommerce-payever-gateway.php?rev=3647773#L145https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/logger/class-payever-logger.php?rev=3647773#L18https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/class-payever-log-manager.php?rev=3647773#L35https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/synchronization/management/class-payever-subscription-manager.php?rev=3647773#L79https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/class-payever-synchronization.php?rev=3647773#L683https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/synchronization/management/class-payever-import-manager.php?rev=3647773#L21https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/synchronization/actions/class-payever-action-update-product.php?rev=3647773#L448https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/includes/synchronization/actions/class-payever-action-update-product.php?rev=3647773#L547https://plugins.trac.wordpress.org/browser/payever-woocommerce-gateway/trunk/vendor/payever/core-sdk-php/lib/Payever/Core/Http/Client/CurlClient.php?rev=3647773#L258https://plugins.trac.wordpress.org/changeset?reponame=&old=3761918%40payever-woocommerce-gateway&new=3761918%40payever-woocommerce-gateway#wordpress #payever #payeverCheckout\u2013ComposablePaymentGateway#CVE_2026_93754#bot", "url": "https://infosec.exchange/users/cve/statuses/117572884303611434"}, {"timestamp": "2026-11-07T03:00:35.290Z", "date_only": false, "value": "2026-11-07T03:00:35.290600Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/offseq/statuses/117572923204780696", "record": "cve-2026-93754", "field": "creation_timestamp", "uuid": "a9ab11f9-c1a9-473f-99b1-ed9f371d75e6", "content": "payever WooCommerce Gateway plugin (\u22644.8.0) hit by CRITICAL vuln (CVE-2026-93754): unauthenticated file upload allows remote code execution. Restrict API access, disable the plugin, check vendor updates. https://radar.offseq.com/threat/cve-2026-93754-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-payever-payever-checkout-681f88a842bbd5a4 #OffSeq #WordPress #RCE #Infosec", "url": "https://infosec.exchange/users/offseq/statuses/117572923204780696"}, {"timestamp": "2026-11-07T03:00:39.616Z", "date_only": false, "value": "2026-11-07T03:00:39.616486Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mzovrgxcfm2u", "record": "cve-2026-93754", "field": "creation_timestamp", "uuid": "b654a374-e730-49a3-a987-64b32db69167", "content": "CVE-2026-93754: payever WooCommerce Gateway (\u22644.8.0) CRITICAL vuln allows unauth PHP file upload & RCE. Restrict API access, disable plugin, monitor for fixes. https://radar.offseq.com/threat/cve-2026-93754-cwe-434-unrestricted-upload-of-file-with-dangerous-type-in-payever-payever-checkout-681f88...", "url": "https://bsky.app/profile/offseq.bsky.social/post/3mzovrgxcfm2u"}, {"timestamp": "2026-11-07T03:17:08Z", "date_only": false, "value": "2026-11-07T03:17:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-5W75-33GQ-GCCG", "record": "GHSA-5W75-33GQ-GCCG", "field": "database_specific.nvd_published_at", "linked_record": true}, {"timestamp": "2026-11-07T03:17:08.410Z", "date_only": false, "value": "2026-11-07T03:17:08.410", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93754", "record": "FKIE_CVE-2026-93754", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T03:17:08.570Z", "date_only": false, "value": "2026-11-07T03:17:08.570", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-93754", "record": "FKIE_CVE-2026-93754", "field": "lastModified", "linked_record": true}, {"timestamp": "2026-11-07T03:31:11Z", "date_only": false, "value": "2026-11-07T03:31:11Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-5W75-33GQ-GCCG", "record": "GHSA-5W75-33GQ-GCCG", "field": "published", "metric_role": "disclosure", "metric_basis": "recorded_event", "linked_record": true}, {"timestamp": "2026-11-07T03:31:11Z", "date_only": false, "value": "2026-11-07T03:31:11Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-5W75-33GQ-GCCG", "record": "GHSA-5W75-33GQ-GCCG", "field": "modified", "linked_record": true}, {"timestamp": "2026-11-07T04:07:16.818Z", "date_only": false, "value": "2026-11-07T04:07:16.818653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mzozinrj7h2c", "record": "CVE-2026-93754", "field": "creation_timestamp", "uuid": "0615b158-369c-4a06-83b0-cddb9be3e1a5", "content": "\ud83d\udea8 CVE-2026-93754 \u2014 CVSS 9.8 CRITICAL\n\nThe payever \u2013 WooCommerce Gateway plugin for WordPress is vulnerable to arbitrary file upload leading to re...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-93754\n\n#CVE #CyberSecurity #InfoSec", "url": "https://bsky.app/profile/stemshop.bsky.social/post/3mzozinrj7h2c"}], "metrics": {"as_of": "2026-11-07T21:58:39.999Z", "anchors": {"origin": {"timestamp": "2026-11-07T02:29:10.521Z", "date_only": false, "value": "2026-11-07T02:29:10.521Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93754", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "discovery": null, "report": null, "acknowledgement": null, "disclosure": {"timestamp": "2026-11-07T02:29:10.521Z", "date_only": false, "value": "2026-11-07T02:29:10.521Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93754", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "exploit_publication": null, "exploitation": null, "patch": null}, "vendor_response_time": {"available": false, "missing": ["start", "end"]}, "time_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit": {"available": false, "missing": ["end"]}, "disclosure_to_exploit_publication": {"available": false, "missing": ["end"]}, "time_to_patch": {"available": false, "missing": ["start", "end"]}, "total_time_to_patch": {"available": false, "missing": ["start", "end"]}, "disclosure_to_patch": {"available": false, "missing": ["end"]}, "time_unpatched": {"available": true, "seconds": 70169.478697, "hours": 19.49152186027778, "days": 0.8121467441782407, "min_seconds": 70169.478697, "max_seconds": 70169.478697, "approximate": false, "ongoing": true, "order_known": true, "batch_listing": false, "end_before_start": false, "start": {"timestamp": "2026-11-07T02:29:10.521Z", "date_only": false, "value": "2026-11-07T02:29:10.521Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-93754", "field": "cveMetadata.datePublished", "metric_role": "disclosure", "metric_basis": "recorded_event"}, "end": {"timestamp": "2026-11-07T21:58:39.999Z", "date_only": false, "label": "As of", "source": "Calculation clock"}}, "exploitation_to_patch": {"available": false, "missing": ["start"]}, "exploit_publication_to_patch": {"available": false, "missing": ["start"]}}}