Payment Gateway PIX for WooCommerce CVE-2026-3891 upload detect

Detects CVE-2026-3891 in Payment Gateway PIX for WooCommerce = 1.5.0: unauthenticated nonce generation via admin-ajax.php indicates exposure to certificatecrtpath arbitrary file upload. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2026-3891 — Payment Gateway PIX for WooCommerce unauthenticate...

Payment Gateway PIX for WooCommerce <= 1.5.0 - Unauthenticated Upload RCE (CVE-2026-3891)

CVE-2026-3891 in Payment Gateway PIX for WooCommerce = 1.5.0: unauthenticated arbitrary file upload via admin-ajax.php lknpixforwoocommercec6savesettings. An attacker obtains a nonce from lknpixforwoocommercegeneratenonce, uploads a PHP webshell as certificatecrtpath, and executes code under...

WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload

Exploit Title: WooCommerce 1.5.0 - Unauthenticated Arbitrary File Upload Google Dork: N/A Date: 2026-07-15 Exploit Author: Mohammad Hossein Sadeghian Vendor Homepage: https://wordpress.org/plugins/payment-gateway-pix-for-woocommerce/ Software Link:...

EUVD-2026-11955

Missing Authorization vulnerability in linknacional Payment Gateway Pix For GiveWP payment-gateway-pix-for-givewp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Pix For GiveWP: from n/a through = 2.2.3...

CVE-2026-32425

Missing Authorization vulnerability in linknacional Payment Gateway Pix For GiveWP payment-gateway-pix-for-givewp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Pix For GiveWP: from n/a through = 2.2.3...

CVE-2026-32425

CVE-2026-32425 concerns the WordPress plugin Payment Gateway Pix For GiveWP (versions up to and including 2.2.3). The issue is a Missing Authorization vulnerability arising from incorrectly configured access control, allowing network-based exploitation with no user interaction and no privileges r...

CVE-2026-32425 WordPress Payment Gateway Pix For GiveWP plugin <= 2.2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in linknacional Payment Gateway Pix For GiveWP payment-gateway-pix-for-givewp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Pix For GiveWP: from n/a through = 2.2.3...

CVE-2026-32425 WordPress Payment Gateway Pix For GiveWP plugin <= 2.2.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in linknacional Payment Gateway Pix For GiveWP payment-gateway-pix-for-givewp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Pix For GiveWP: from n/a through = 2.2.3...

WordPress plugin Payment Gateway Pix has a security vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

CVE-2026-32425: Missing Authorization

Missing Authorization vulnerability in linknacional Payment Gateway Pix For GiveWP payment-gateway-pix-for-givewp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Payment Gateway Pix For GiveWP: from n/a through = 2.2.3...

WordPress Payment Gateway Pix For GiveWP plugin <= 2.2.3 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin Payment Gateway Pix For GiveWP versions = 2.2.3...