Skip to content
Sign in
3.7 Low

CVE-2026-96962 The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing…

Description

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code.

Affected products and versions

Product Affected versions Fixed in
Pie Register 3.8 earliest → < 3.8.4.14 3.8.4.14

Other CVEs of Pie Register

The 2 CVEs of Pie Register →
CVE-2026-10530 The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account… 5.3 Medium
Track this CVE