plugin

Payment Gateway Pix For Woocommerce Vulnerabilities

2 known security issues reported for the Payment Gateway Pix For Woocommerce WordPress plugin. Most recent disclosed Mar 13, 2026.

2 critical

Running Payment Gateway Pix For Woocommerce on your site? Check whether your installed version is affected.

Scan your site free

Pix for WooCommerce - Unauthenticated Arbitrary File Upload vulnerability

critical

Unauthenticated Arbitrary File Upload vulnerability

CVSS:: 10
Affected:: up to 1.5.0
Fixed in:: 1.6.0
Disclosed:: Mar 13, 2026

Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload

critical

The Pix for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing capability check and missing file type validation in the 'lkn_pix_for_woocommerce_c6_save_settings' function in all versions up to, and including, 1.5.0. This makes it possible for unauthenticated attackers to upload arb...

CVSS:: 9.8
Affected:: up to 1.5.0
Fixed in:: 1.6.0
Disclosed:: Mar 12, 2026

CVE-2026-3891 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database