Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

Mass-Scanner-CVE-2026-3891

マススキャナー CVE-2026-3891 管理された環境における特定のWordPress AJAX動作の検証に焦点を当てた、Pythonベースのマススキャナー CVE-2026-3891 のための、クリーンでアニメーション付きのGitHubプレゼンテーションです。 このリポジトリは、許可されたセキュリティテスト、内部監査、ラボ環境、および防御的研究 のみを厳密に目的としています。 概要 このプロジェクトは、防御者や研究者が、自分が所有・管理している、または明示的に評価を許可された環境内で、特定のWordPress AJAX関連の動作をレビューするのを支援するために作成されました。...

CVE-2026-3891

CVE-2026-3891 This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out...

CVE-2026-3891

このリポジトリには README がありません。...

Exploit for CVE-2026-3891

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Descri...

CVE-2026-3891

creationtimestamp| type| source ---|---|--- 2026-03-13 09:00:34+00:00| seen| https://infosec.exchange/users/offseq/statuses/116221046168571316 2026-03-26 16:00:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/77374 2026-03-27 07:00:14+00:00| published-proof-of-concept|...

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

WordPress Unauthenticated RCE via Pix for WooCommerce plugin

This Metasploit module exploits an Unauthenticated Arbitrary File Upload vulnerability in the Pix for WooCommerce plugin for WordPress. Attackers can leverage the missing capability check and insufficient file type validation in the 'lknpixforwoocommercec6savesettings' function to upload arbitrar...

EUVD-2026-3891

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in RealMag777 TableOn posts-table-filterable allows Reflected XSS.This issue affects TableOn: from n/a through = 1.0.4.2...