Lucene search
+L

21 matches found

Kitploit
Kitploit
โ€ขadded 2026/09/05 7:58 a.m.โ€ข5 views

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit ๐Ÿ›ก๏ธ เคตเคฟเคตเคฐเคฃ CVE-2026-3891 เคเค• เคฎเคนเคคเฅเคตเคชเฅ‚เคฐเฅเคฃ เค…เคชเฅเคฐเคฎเคพเคฃเคฟเคค เคฎเคจเคฎเคพเคจเคพ เคซเคผเคพเค‡เคฒ เค…เคชเคฒเฅ‹เคก เค•เคฎเคœเฅ‹เคฐเฅ€ เคนเฅˆ เคœเฅ‹ Pix for WooCommerce WordPress เคชเฅเคฒเค—เค‡เคจ เคฎเฅ‡เค‚ เคธเค‚เคธเฅเค•เคฐเคฃ 1.5.0 เคคเค• เค”เคฐ เคธเคนเคฟเคค เคฎเฅ‡เค‚ เคชเคพเคˆ เค—เคˆ เคนเฅˆเฅค เคฏเคน เค•เคฎเคœเฅ‹เคฐเฅ€ lknpixforwoocommercec6savesettings เค•เคพเคฐเฅเคฏเค•เฅเคทเคฎเคคเคพ เคฎเฅ‡เค‚ เคฎเฅŒเคœเฅ‚เคฆ เคนเฅˆ, เคœเฅ‹ เค…เคจเคงเคฟเค•เฅƒเคค...

9.8CVSS5.4AI score0.2506EPSS
SaveExploits13
Kitploit
Kitploit
โ€ขadded 2026/09/05 4:50 a.m.โ€ข5 views

CVE-2026-3891

Pix for WooCommerce = 1.5.0 - Tรฉlรฉchargement arbitraire de fichiers non authentifiรฉ CVE-2026-3891 PoC ๐Ÿ“œ Description CVE-2026-3891 est une vulnรฉrabilitรฉ de tรฉlรฉchargement arbitraire de fichiers non authentifiรฉ dans le plugin WordPress Pix for WooCommerce. Le plugin expose un endpoint AJAX...

9.8CVSS5.2AI score0.2506EPSS
SaveExploits13
Nuclei
Nuclei
โ€ขadded 2026/09/05 2:04 a.m.โ€ข23 views

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.4AI score0.2506EPSS
SaveExploits13References2
Kitploit
Kitploit
โ€ขadded 2026/09/02 4:23 p.m.โ€ข4 views

CVE-2026-3891-Linux

root@kitploit: โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ• โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ•šโ•โ•โ•โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘ โ•šโ•โ• โ•šโ•โ• โ•šโ•โ•โ•šโ•โ•โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ•...

9.8CVSS5.1AI score0.2506EPSS
SaveExploits13
Kitploit
Kitploit
โ€ขadded 2026/08/30 5:27 p.m.โ€ข10 views

CVE-2026-3891

๐Ÿš€ CVE-2026-3891 โ€“ ุฑูุน ู…ู„ูุงุช ุบูŠุฑ ู…ุตุงุฏูŽู‚ ุนู„ูŠู‡ ููŠ Pix for WooCommerce ูŠุคุฏูŠ ุฅู„ู‰ ุชู†ููŠุฐ ูƒูˆุฏ ุนู† ุจูุนุฏ RCE ุฅุซุจุงุช ุงู„ู…ูู‡ูˆู… PoC ู„ุซุบุฑุฉ CVE-2026-3891 โ€“ ุฑูุน ู…ู„ูุงุช ุชุนุณููŠ ุบูŠุฑ ู…ุตุงุฏูŽู‚ ุนู„ูŠู‡ ูŠุคุฏูŠ ุฅู„ู‰ ุชู†ููŠุฐ ูƒูˆุฏ ุนู† ุจูุนุฏ ููŠ ุฅุถุงูุฉ Pix for WooCommerce ู„ูˆูˆุฑุฏุจุฑูŠุณ ุงู„ุฅุตุฏุงุฑุงุช โ‰ค 1.5.0. ๐Ÿ“– ู†ุธุฑุฉ ุนุงู…ุฉ CVE-2026-3891 ู‡ูŠ ุซุบุฑุฉ ุญุฑุฌุฉ ููŠ...

9.8CVSS5.5AI score0.2506EPSS
SaveExploits13References2
GithubExploit
GithubExploit
โ€ขadded 2026/07/15 7:24 p.m.โ€ข102 views

Exploit for CVE-2026-3891

CVE-2026-3891 โ€” Pix for WooCommerce Unauthenticated File Upload...

9.8CVSS6.2AI score0.2506EPSS
SaveExploits13
GithubExploit
GithubExploit
โ€ขadded 2026/07/15 7:06 p.m.โ€ข94 views

Exploit for CVE-2026-3891

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit ๐Ÿ›ก๏ธ Descri...

9.8CVSS6.2AI score0.2506EPSS
SaveExploits13
GithubExploit
GithubExploit
โ€ขadded 2026/05/31 9:45 a.m.โ€ข138 views

Exploit for CVE-2026-3891

โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•...

9.8CVSS6.1AI score0.2506EPSS
SaveExploits13
GithubExploit
GithubExploit
โ€ขadded 2026/03/27 6:00 a.m.โ€ข160 views

Exploit for CVE-2026-3891

CVE-2026-3891 Pix for WooCommerce = 1.5.0 - Unauthenticate...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits13
RedhatCVE
RedhatCVE
โ€ขadded 2026/03/26 3:04 p.m.โ€ข15 views

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.6AI score0.2506EPSS
SaveExploits13References1
EUVD
EUVD
โ€ขadded 2026/03/13 9:31 p.m.โ€ข16 views

EUVD-2026-11760

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.5AI score0.2506EPSS
SaveExploits13References4
GithubExploit
GithubExploit
โ€ขadded 2026/03/13 8:33 p.m.โ€ข277 views

Exploit for CVE-2026-3891

Pix for WooCommerce ๐Ÿ“œ Description...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits13
NVD
NVD
โ€ขadded 2026/03/13 7:55 p.m.โ€ข13 views

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS0.2506EPSS
SaveExploits13References3
ATTACKERKB
ATTACKERKB
โ€ขadded 2026/03/13 7:23 a.m.โ€ข10 views

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.5AI score0.2506EPSS
SaveExploits13References6
Vulnrichment
Vulnrichment
โ€ขadded 2026/03/13 7:23 a.m.โ€ข8 views

CVE-2026-3891 Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.5AI score0.2506EPSS
SaveExploits13References3
CVE
CVE
โ€ขadded 2026/03/13 7:23 a.m.โ€ข139 views

CVE-2026-3891

CVE-2026-3891 affects the Pix for WooCommerce WordPress plugin. The issue is an unauthenticated arbitrary file upload in the lkn_pix_for_woocommerce_c6_save_settings endpoint (and related nonce generation flow), caused by missing capability checks and file-type validation in all versions up to 1....

9.8CVSS6.5AI score0.2506EPSS
SaveExploits13References3
Cvelist
Cvelist
โ€ขadded 2026/03/13 7:23 a.m.โ€ข43 views

CVE-2026-3891 Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS0.2506EPSS
SaveExploits13References3
Patchstack
Patchstack
โ€ขadded 2026/03/13 6:56 a.m.โ€ข14 views

WordPress Pix for WooCommerce plugin <= 1.5.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Alexis Lafontaine in WordPress Plugin Pix for WooCommerce versions = 1.5.0...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits13References1Affected Software1
CNNVD
CNNVD
โ€ขadded 2026/03/13 12:00 a.m.โ€ข17 views

WordPress plugin Pix for WooCommerce ไปฃ็ ้—ฎ้ข˜ๆผๆดž

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

9.8CVSS6.3AI score0.2506EPSS
SaveExploits13References3
Positive Technologies
Positive Technologies
โ€ขadded 2026/03/13 12:00 a.m.โ€ข14 views

PT-2026-25155

Name of the Vulnerable Software and Affected Versions Pix for WooCommerce versions up to and including 1.5.0 Description The Pix for WooCommerce plugin for WordPress is susceptible to arbitrary file uploads. This is due to a missing capability check and a lack of file type validation within the l...

9.8CVSS6.1AI score0.2506EPSS
SaveExploits13References14
Rows per page
Query Builder