3.7
Low
CVE-2026-96962 The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing…
Description
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pie Register 3.8 | earliest → < 3.8.4.14 | 3.8.4.14 |
Other CVEs of Pie Register
The 4 CVEs of Pie Register →
CVE-2026-96963
Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
Not rated
CVE-2026-96961
Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction
Not rated
CVE-2026-10530
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account…
5.3
Medium