Lucene search
K

216 matches found

Nuclei
Nuclei
added 7 hours ago47 views

WordPress Pie Register <= 3.7.1.4 - Authentication Bypass

An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting socialsite=true and manipulating the useridsocialsite parameter,...

10CVSS8.7AI score0.76237EPSS
Exploits7References3
Nuclei
Nuclei
added 7 hours ago41 views

WordPress Pie Register <3.8.2.3 - Open Redirect

WordPress Pie Register plugin before 3.8.2.3 contains an open redirect vulnerability. The plugin does not properly validate the redirection URL when logging in and login out. An attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute...

5.4CVSS6.6AI score0.16376EPSS
Exploits2References2
Nuclei
Nuclei
added 7 hours ago28 views

WordPress Pie Register <3.7.0.1 - Cross-Site Scripting

WordPress Pie Register plugin before 3.7.0.1 is susceptible to cross-site scripting. The plugin does not sanitize the invitaioncode GET parameter when outputting it in the Activation Code page. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the...

6.1CVSS5.8AI score0.01855EPSS
Exploits2References3
Nuclei
Nuclei
added yesterday25 views

WordPress Pie-Register <2.0.19 - Cross-Site Scripting

WordPress Pie Register before 2.0.19 contains a reflected cross-site scripting vulnerability in pie-register/pie-register.php which allows remote attackers to inject arbitrary web script or HTML via the invitaioncode parameter in a pie-register page to the default URL. id: CVE-2015-7377 info: nam...

4.3CVSS5.8AI score0.05825EPSS
Exploits3References5
Nuclei
Nuclei
added yesterday30 views

Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login

The Registration Forms User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin before 3.1.7.6 has a flaw in the social login implementation, allowing unauthenticated attacker to login as any user on the site by only knowing their user ID or username...

8.1CVSS7.2AI score0.85031EPSS
Exploits3References3
EUVD
EUVD
added 2026/04/04 3:31 a.m.1 views

EUVD-2026-18965

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the piemain function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attacker...

6.5CVSS5.9AI score0.0003EPSS
Exploits0References3
NVD
NVD
added 2026/04/04 2:15 a.m.3 views

CVE-2026-3571

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the piemain function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attacker...

6.5CVSS0.0003EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/04 1:24 a.m.19 views

CVE-2026-3571 Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.8 - Missing Authorization to Unauthenticated Registration Form Status Modification

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the piemain function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attacker...

6.5CVSS0.0003EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/04 1:24 a.m.1 views

CVE-2026-3571

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the piemain function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attacker...

6.5CVSS5.9AI score0.0003EPSS
Exploits0References3
CVE
CVE
added 2026/04/04 1:24 a.m.6 views

CVE-2026-3571

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is affected by an authorization flaw in which the pie_main() function lacks a capability check across all versions up to 3.8.4.8. This allows unauthenticated attackers to modify the registration form status,...

6.5CVSS5.9AI score0.0003EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/04 1:24 a.m.1 views

CVE-2026-3571 Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.8 - Missing Authorization to Unauthenticated Registration Form Status Modification

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the piemain function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attacker...

6.5CVSS5.9AI score0.0003EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/04 12:0 a.m.3 views

WordPress plugin Pie Register – User Registration, Profiles & Content Restriction 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

6.5CVSS5.8AI score0.0003EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/04 12:0 a.m.1 views

PT-2026-30303

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pie main function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attacke...

6.5CVSS5.9AI score0.0003EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.4 views

CVE-2026-24577

Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pie Register: from n/a through = 3.8.4.8...

5.3CVSS5.9AI score0.00051EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.3 views

CVE-2026-24577

Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pie Register: from n/a through = 3.8.4.8...

5.3CVSS0.00051EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:28 p.m.8 views

CVE-2026-24577

CVE-2026-24577 is a Missing Authorization/broken access control vulnerability in the WordPress Pie Register plugin, affecting Pie Register versions up to 3.8.4.7. The issue arises from incorrectly configured access control security levels, enabling unauthorized access or privilege-related impact ...

5.3CVSS5.9AI score0.00051EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:28 p.m.2 views

CVE-2026-24577

Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pie Register: from n/a through = 3.8.4.7...

5.3CVSS5.9AI score0.00051EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/23 2:28 p.m.28 views

CVE-2026-24577 WordPress Pie Register plugin <= 3.8.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pie Register: from n/a through = 3.8.4.8...

5.3CVSS0.00051EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/23 2:28 p.m.2 views

CVE-2026-24577 WordPress Pie Register plugin <= 3.8.4.8 - Broken Access Control vulnerability

Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pie Register: from n/a through = 3.8.4.8...

5.3CVSS5.8AI score0.00051EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.4 views

PT-2026-4416

Name of the Vulnerable Software and Affected Versions Genetech Products Pie Register versions through 3.8.4.7 Description An authorization issue exists in Pie Register that allows exploiting incorrectly configured access control security levels. Recommendations Update Pie Register to a version...

5.3CVSS5.2AI score0.00051EPSS
Exploits0References3
Rows per page
Query Builder