{"uuid": "ab6a29ab-79c5-4e07-abb8-7e9f93209bbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-3891", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/wp_plugin_pix_unauth_rce_cve_2026_3891.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Maksim Rogov\", \"Alexis Lafontaine\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This Metasploit module exploits an Unauthenticated Arbitrary File Upload vulnerability in the Pix for WooCommerce plugin for WordPress.\\n\\n          Attackers can leverage the missing capability check and insufficient file type validation in the 'lkn_pix_for_woocommerce_c6_save_settings' function to upload arbitrary files to the affected server, which may lead to remote code execution under the web server's privileges.\\n\\n          The affected versions include all releases up to and including 1.5.0.\", \"disclosure_date\": \"2026-03-12\", \"fullname\": \"exploit/multi/http/wp_plugin_pix_unauth_rce_cve_2026_3891\", \"is_install_path\": true, \"mod_time\": \"2026-07-24 08:40:10 +0000\", \"name\": \"WordPress Unauthenticated RCE via Pix for WooCommerce plugin\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/http/wp_plugin_pix_unauth_rce_cve_2026_3891.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/wp_plugin_pix_unauth_rce_cve_2026_3891\", \"references\": [\"CVE-2026-3891\", \"WPVDB-36b05ea1-77d4-4561-b735-900e9ada4ccc\", \"URL-https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/payment-gateway-pix-for-woocommerce/pix-for-woocommerce-150-unauthenticated-arbitrary-file-upload\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Pix for WooCommerce <= 1.5.0 / Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:22.372465Z"}