CVE-2026-3891 | linknacional Pix for WooCommerce Plugin up to 1.5.0 on WordPress Setting lkn_pix_for_woocommerce_c6_save_settings unrestricted upload

A vulnerability was found in linknacional Pix for WooCommerce Plugin up to 1.5.0 on WordPress. It has been declared as critical. The affected element is the function lkn_pix_for_woocommerce_c6_save_settings of the component Setting Handler. Executing a manipulation can lead to unrestricted upload.

This vulnerability appears as CVE-2026-3891. The attack may be performed from remote. There is no available exploit.