CVE-2026-96962

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code...

EUVD-2026-91949

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code...

CVE-2026-96962

The Pie Register WordPress plugin (versions prior to 3.8.4.14 ) contains a vulnerability where it fails to restrict access to an invitation-code report . This flaw allows unauthenticated visitors to obtain the usernames and email addresses of all users who registered using a specific, known invit...

CVE-2026-96962: Exposure of Sensitive Information to an Unauthorized Actor

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code...

CVE-2026-10530: Undefined Security Weakness

The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to predict a valid token and activate an account without access to the associated email inbox...

CVE-2026-3571: Missing Authorization

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the piemain function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attacker...

CVE-2024-4544: Authentication Bypass Using an Alternate Path or Channel

The Pie Register - Social Sites Login Add on plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.7. This is due to insufficient verification on the user being supplied during a social login through the plugin. This makes it possible for unauthenticate...

PT-2024-31629

Name of the Vulnerable Software and Affected Versions: The Pie Register - Social Sites Login Add on plugin for WordPress versions up to, and including, 1.7.7 PHP versions 8.3 up to 8.3.8 PHP versions 8.2 up to 8.2.20 PHP versions 8.1 up to 8.1.29 Description: The issue is due to insufficient...

PT-2021-15782

Name of the Vulnerable Software and Affected Versions The Pie Register – User Registration Forms plugin versions prior to 3.7.0.1 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the invitaion code GET parameter is not properly sanitized when it is...

CVE-2021-24239: Improper Neutralization of Input During Web Page Generation

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin before 3.7.0.1 does not sanitise the invitaioncode GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scripting issue...