Tag

Cve-2026-3891

1 brief RSS

Unauthenticated Remote Code Execution in Pix for WooCommerce

A critical vulnerability (CVE-2026-3891) in the Pix for WooCommerce WordPress plugin allows unauthenticated attackers to upload and execute arbitrary PHP files via vulnerable AJAX handlers.

Pix for WooCommerce wordpress rce cve-2026-3891

1r 2t 1c 3m ago