Pix for WooCommerce <=1.5.0 - Arbitrary File Upload
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2026-3891. PoCs published by willygailo, joshuavanderpoll, AnggaTechI.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2026-3891, targeting an unauthenticated arbitrary file upload vulnerability in Pix for WooCommerce <= 1.5.0. The exploit is obfuscated using PyArmor and includes a GUI for ease of use.
Description
The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_for_woocommerce_c6_save_settings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
Exploits (5)
This repository contains a functional exploit for CVE-2026-3891, targeting an unauthenticated arbitrary file upload vulnerability in Pix for WooCommerce <= 1.5.0. The exploit is obfuscated using PyArmor and includes a GUI for ease of use.
This repository contains a functional exploit for CVE-2026-3891, an unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce plugin (versions <= 1.5.0). The exploit uploads a PHP webshell to the target server and allows command execution.
This repository contains a Python-based scanner for CVE-2026-3891, which targets a WordPress AJAX behavior. The tool checks for the presence of a nonce generation endpoint and validates responses, but does not include exploit code for weaponization.
This repository contains a functional exploit for CVE-2026-3891, targeting a file upload vulnerability in the 'lkn_pix_for_woocommerce' WordPress plugin. The exploit automates the process of generating a nonce and uploading a malicious shell via the plugin's settings functionality.
This repository contains a functional Python exploit for CVE-2026-3891, an unauthenticated arbitrary file upload vulnerability in the Pix for WooCommerce plugin (version <= 1.5.0). The exploit uploads a PHP webshell by leveraging a nonce generation endpoint and a file upload endpoint, then allows command execution via the uploaded shell.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H