Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

Mass-Scanner-CVE-2026-3891

Mass Scanner CVE-2026-3891 통제된 환경에서 특정 WordPress AJAX 동작을 검증하는 데 초점을 맞춘 Python 기반 Mass Scanner CVE-2026-3891을 위한 깔끔하고 애니메이션된 GitHub 프레젠테이션입니다. 이 저장소는 승인된 보안 테스트, 내부 감사, 랩 환경 및 방어적 연구 만을 위한 것입니다. 개요 이 프로젝트는 방어자와 연구자가 소유, 관리 또는 명시적으로 평가 권한을 부여받은 환경 내에서 특정 WordPress AJAX 관련 동작을 검토할 수 있도록 돕기 위해...

CVE-2026-3891

CVE-2026-3891 This tool was created solely for educational purposes, not for criminal activities or anything of the sort. Do not misuse this tool. Good luck trying it out...

CVE-2026-3891

이 저장소에는 README가 없습니다...

Exploit for CVE-2026-3891

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit 🛡️ Descri...

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

WordPress Unauthenticated RCE via Pix for WooCommerce plugin

This Metasploit module exploits an Unauthenticated Arbitrary File Upload vulnerability in the Pix for WooCommerce plugin for WordPress. Attackers can leverage the missing capability check and insufficient file type validation in the 'lknpixforwoocommercec6savesettings' function to upload arbitrar...