Not rated
CVE-2026-96963 Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
Description
The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as contributor to modify existing administrator-created invitation-code records.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Pie Register 3.8 | earliest → 3.8.4.15 | No fix stated |
Other CVEs of Pie Register
The 4 CVEs of Pie Register →
CVE-2026-96961
Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction
Not rated
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing…
3.7
Low
CVE-2026-10530
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account…
5.3
Medium