Not rated
CVE-2026-96961 Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction
Description
The Pie Register WordPress plugin through 3.8.4.15 does not perform any capability, nonce or authentication check on one of its request handlers, allowing unauthenticated attackers to reset the Pie Register WordPress plugin through 3.8.4.15's settings to their defaults (disabling registration security controls such as new-user email verification) and to destroy a Pie Register WordPress plugin through 3.8.4.15 data table.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pie Register 3.8 | earliest → 3.8.4.15 | No fix stated |
Other CVEs of Pie Register
The 4 CVEs of Pie Register →
CVE-2026-96963
Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
Not rated
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing…
3.7
Low
CVE-2026-10530
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account…
5.3
Medium