Skip to content
Threat Feed
Subscribe

Product

Pix for WooCommerce

1 brief RSS
critical advisory

Unauthenticated Remote Code Execution in Pix for WooCommerce

A critical vulnerability (CVE-2026-3891) in the Pix for WooCommerce WordPress plugin allows unauthenticated attackers to upload and execute arbitrary PHP files via vulnerable AJAX handlers.

Pix for WooCommerce wordpress rce cve-2026-3891
1r 2t 1c