Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

CVE-2026-3891

このリポジトリには README がありません。...

Mass-Scanner-CVE-2026-3891

マススキャナー CVE-2026-3891 管理された環境における特定のWordPress AJAX動作の検証に焦点を当てた、Pythonベースのマススキャナー CVE-2026-3891 のための、クリーンでアニメーション付きのGitHubプレゼンテーションです。 このリポジトリは、許可されたセキュリティテスト、内部監査、ラボ環境、および防御的研究 のみを厳密に目的としています。 概要 このプロジェクトは、防御者や研究者が、自分が所有・管理している、または明示的に評価を許可された環境内で、特定のWordPress AJAX関連の動作をレビューするのを支援するために作成されました。...

CVE-2026-3891

CVE-2026-3891 This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out...

Exploit for CVE-2026-3891

No d...

WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload

Exploit Title: WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload Google Dork: N/A Date: 2026-07-15 Exploit Author: Mohammad Hossein Sadeghian Vendor Homepage: https://wordpress.org/plugins/payment-gateway-pix-for-woocommerce/ Software Link:...

Exploit for CVE-2026-3891

CVE-2026-3891 This tool was crea...

Exploit for CVE-2026-3891

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Descri...

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

WordPress Unauthenticated RCE via Pix for WooCommerce plugin

This Metasploit module exploits an Unauthenticated Arbitrary File Upload vulnerability in the Pix for WooCommerce plugin for WordPress. Attackers can leverage the missing capability check and insufficient file type validation in the 'lknpixforwoocommercec6savesettings' function to upload arbitrar...