Non notée
CVE-2026-96961 Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction
Description
The Pie Register WordPress plugin through 3.8.4.15 does not perform any capability, nonce or authentication check on one of its request handlers, allowing unauthenticated attackers to reset the Pie Register WordPress plugin through 3.8.4.15's settings to their defaults (disabling registration security controls such as new-user email verification) and to destroy a Pie Register WordPress plugin through 3.8.4.15 data table.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pie Register 3.8 | premières → 3.8.4.15 | Pas de correctif indiqué |
Autres CVE de Pie Register
Les 4 CVE de Pie Register →
CVE-2026-96963
Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
Non notée
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing…
3.7
Faible
CVE-2026-10530
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account…
5.3
Moyenne