{"uuid": "a6dd8973-32c6-42ad-a718-c3bfedb011d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3891", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116931533266651908", "content": "\u203c\ufe0f CVE-2026-3891: A critical Unauthenticated Arbitrary File Upload vulnerability found in the Pix for WooCommerce WordPress plugin in versions up to and including 1.5.0.\nPoC: https://github.com/m4sh-wacker/CVE-2026-3891-Pix-for-WooCommerce-Plugin-Exploit", "creation_timestamp": "2026-07-16T20:26:41.793062Z"}