Lucene search
+L

21 matches found

Kitploit
Kitploit
โ€ขadded 2026/08/31 3:28 a.m.โ€ข4 views

CVE-2026-3891

Pix for WooCommerce = 1.5.0 - Unauthenticated Arbitrary File Upload CVE-2026-3891 PoC ๐Ÿ“œ Description CVE-2026-3891 is an unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce WordPress plugin. The plugin exposes an AJAX endpoint lknpixforwoocommercec6savesettings that...

9.8CVSS5.9AI score0.2506EPSS
SaveExploits12
Kitploit
Kitploit
โ€ขadded 2026/08/30 11:28 p.m.โ€ข3 views

CVE-2026-3891-Linux

root@kitploit: โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ•โ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•”โ•โ•โ•โ•โ• โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•”โ•โ•โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•”โ•โ•โ• โ–ˆโ–ˆโ•‘โ•šโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ•šโ•โ•โ•โ•โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘ โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ•‘ โ•šโ–ˆโ–ˆโ–ˆโ–ˆโ•‘โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•”โ•โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•‘ โ•šโ•โ• โ•šโ•โ• โ•šโ•โ•โ•šโ•โ•โ•šโ•โ•โ•โ•โ•โ•โ•โ•šโ•โ•...

9.8CVSS5.9AI score0.2506EPSS
SaveExploits12
Kitploit
Kitploit
โ€ขadded 2026/08/30 5:27 p.m.โ€ข7 views

CVE-2026-3891

๐Ÿš€ CVE-2026-3891 โ€“ Pix for WooCommerce Unauthenticated File Upload RCE Proofโ€‘ofโ€‘Concept exploit for CVE-2026-3891 โ€“ unauthenticated arbitrary file upload leading to remote code execution in the Pix for WooCommerce WordPress plugin โ‰ค 1.5.0. ๐Ÿ“– Overview CVE-2026-3891 is a critical vulnerability in th...

9.8CVSS6.4AI score0.2506EPSS
SaveExploits12References2
Nuclei
Nuclei
โ€ขadded 2026/08/30 5:46 a.m.โ€ข21 views

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.4AI score0.2506EPSS
SaveExploits12References2
Kitploit
Kitploit
โ€ขadded 2026/08/27 1:35 a.m.โ€ข3 views

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit ๐Ÿ›ก๏ธ Beschreibung CVE-2026-3891 ist eine kritische Unauthenticated Arbitrary File Upload -Sicherheitslรผcke, die im Pix for WooCommerce WordPress-Plugin in den Versionen bis einschlieรŸlich 1.5.0 gefunden wurde. Die Schwachstelle existiert in der...

9.8CVSS5.2AI score0.2506EPSS
SaveExploits12
GithubExploit
GithubExploit
โ€ขadded 2026/07/15 7:24 p.m.โ€ข99 views

Exploit for CVE-2026-3891

CVE-2026-3891 โ€” Pix for WooCommerce Unauthenticated File Upload...

9.8CVSS6.2AI score0.2506EPSS
SaveExploits12
GithubExploit
GithubExploit
โ€ขadded 2026/07/15 7:06 p.m.โ€ข91 views

Exploit for CVE-2026-3891

CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit ๐Ÿ›ก๏ธ Descri...

9.8CVSS6.2AI score0.2506EPSS
SaveExploits12
GithubExploit
GithubExploit
โ€ขadded 2026/05/31 9:45 a.m.โ€ข135 views

Exploit for CVE-2026-3891

โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•—โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ•— โ–ˆโ–ˆโ•”โ•...

9.8CVSS6.1AI score0.2506EPSS
SaveExploits12
GithubExploit
GithubExploit
โ€ขadded 2026/03/27 6:00 a.m.โ€ข158 views

Exploit for CVE-2026-3891

CVE-2026-3891 Pix for WooCommerce = 1.5.0 - Unauthenticate...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits12
RedhatCVE
RedhatCVE
โ€ขadded 2026/03/26 3:04 p.m.โ€ข14 views

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.6AI score0.2506EPSS
SaveExploits12References1
EUVD
EUVD
โ€ขadded 2026/03/13 9:31 p.m.โ€ข15 views

EUVD-2026-11760

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.5AI score0.2506EPSS
SaveExploits12References4
GithubExploit
GithubExploit
โ€ขadded 2026/03/13 8:33 p.m.โ€ข277 views

Exploit for CVE-2026-3891

Pix for WooCommerce ๐Ÿ“œ Description...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits12
NVD
NVD
โ€ขadded 2026/03/13 7:55 p.m.โ€ข12 views

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS0.2506EPSS
SaveExploits12References3
ATTACKERKB
ATTACKERKB
โ€ขadded 2026/03/13 7:23 a.m.โ€ข10 views

CVE-2026-3891

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.5AI score0.2506EPSS
SaveExploits12References6
CVE
CVE
โ€ขadded 2026/03/13 7:23 a.m.โ€ข135 views

CVE-2026-3891

CVE-2026-3891 affects the Pix for WooCommerce WordPress plugin. The issue is an unauthenticated arbitrary file upload in the lkn_pix_for_woocommerce_c6_save_settings endpoint (and related nonce generation flow), caused by missing capability checks and file-type validation in all versions up to 1....

9.8CVSS6.5AI score0.2506EPSS
SaveExploits12References3
Cvelist
Cvelist
โ€ขadded 2026/03/13 7:23 a.m.โ€ข40 views

CVE-2026-3891 Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS0.2506EPSS
SaveExploits12References3
Vulnrichment
Vulnrichment
โ€ขadded 2026/03/13 7:23 a.m.โ€ข8 views

CVE-2026-3891 Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lknpixforwoocommercec6savesettings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated...

9.8CVSS6.5AI score0.2506EPSS
SaveExploits12References3
Patchstack
Patchstack
โ€ขadded 2026/03/13 6:56 a.m.โ€ข13 views

WordPress Pix for WooCommerce plugin <= 1.5.0 - Unauthenticated Arbitrary File Upload vulnerability

Unauthenticated Arbitrary File Upload vulnerability discovered by Alexis Lafontaine in WordPress Plugin Pix for WooCommerce versions = 1.5.0...

9.8CVSS5.8AI score0.2506EPSS
SaveExploits12References1Affected Software1
Positive Technologies
Positive Technologies
โ€ขadded 2026/03/13 12:00 a.m.โ€ข13 views

PT-2026-25155

Name of the Vulnerable Software and Affected Versions Pix for WooCommerce versions up to and including 1.5.0 Description The Pix for WooCommerce plugin for WordPress is susceptible to arbitrary file uploads. This is due to a missing capability check and a lack of file type validation within the l...

9.8CVSS6.1AI score0.2506EPSS
SaveExploits12References14
CNNVD
CNNVD
โ€ขadded 2026/03/13 12:00 a.m.โ€ข17 views

WordPress plugin Pix for WooCommerce ไปฃ็ ้—ฎ้ข˜ๆผๆดž

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

9.8CVSS6.3AI score0.2506EPSS
SaveExploits12References3
Rows per page
Query Builder