CVE-2026-84999

The Pie Register Premium plugin for WordPress (versions up to and including 3.8.4.0 ) is vulnerable to an Unauthenticated Arbitrary File Upload via the piereg_file_upload AJAX handler. The root cause is that the plugin fails to check for errors returned by wp_check_filetype and wp_check_filetype_...

EUVD-2026-111559

The Pie Register Premium plugin for WordPress is vulnerable to Unrestricted File Type Upload in all versions up to, and including, 3.8.4.0 via the pieregfileupload function. This is due to the plugin performing file type validation via wpcheckfiletype and wpcheckfiletypeandext but never checking...