CVE-2014-8802

CVE-2014-8802 affects the WordPress Pie Register plugin, specifically versions before 2.0.14. The issue arises from inadequate access control in pie-register.php, allowing remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action. Expl...

WordPress Plugin Pie Register 2.0.13 - Privilege Escalation

Exploit Title: Pie Register 2.0.13 Privilege escalation Date: 16-10-2014 Software Link: https://wordpress.org/plugins/pie-register/ Exploit Author: Kacper Szurek Contact: http://twitter.com/KacperSzurek Website: http://security.szurek.pl/ CVE: CVE-2014-8802 Category: webapps 1. Description Anyone...