5.3
Medium
CVE-2026-10530 The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account…
Description
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to predict a valid token and activate an account without access to the associated email inbox.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pie Register 3.8 | earliest → < 3.8.4.10 | 3.8.4.10 |
Other CVEs of Pie Register
The 4 CVEs of Pie Register →
CVE-2026-96963
Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
Not rated
CVE-2026-96961
Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction
Not rated
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing…
3.7
Low