CVE Intelligence

Linknacional Pix for WooCommerce vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Linknacional Pix for WooCommerce: 1 record(s), with affected versions and fixes.

CVE-2026-3891 Critical · 9.8 High · 48 Public exploit CWE-434 Mar 13, 2026
Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload
The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_for_woocommerce_c6_save_settings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.