Non notée
CVE-2026-96963 Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
Description
The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as contributor to modify existing administrator-created invitation-code records.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Pie Register 3.8 | premières → 3.8.4.15 | Pas de correctif indiqué |
Autres CVE de Pie Register
Les 4 CVE de Pie Register →
CVE-2026-96961
Pie Register <= 3.8.4.15 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction
Non notée
CVE-2026-96962
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing…
3.7
Faible
CVE-2026-10530
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account…
5.3
Moyenne