Skip to content
Sign in
5.3 Medium

CVE-2026-10530 The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account…

Description

The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to predict a valid token and activate an account without access to the associated email inbox.

Affected products and versions

Product Affected versions Fixed in
Pie Register 3.8 earliest → < 3.8.4.10 3.8.4.10

Other CVEs of Pie Register

The 2 CVEs of Pie Register →
CVE-2026-96962 The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing… 3.7 Low
Track this CVE