3.7
Faible
CVE-2026-96962 The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing…
Description
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pie Register 3.8 | premières → < 3.8.4.14 | 3.8.4.14 |
Autres CVE de Pie Register
Les 4 CVE de Pie Register →
CVE-2026-96963
Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
Non notée
CVE-2026-96961
Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction
Non notée
CVE-2026-10530
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account…
5.3
Moyenne