Pie Register
Approved changes feed: RSS · Atom
cpe:2.3:a:genetechsolutions:pie_register:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Genetechsolutions (c47a9173-3858-5b38-92fc-1b97fb89e252) |
|---|---|
| Product | Pie Register (72ab30c3-eba0-527f-a53d-930ebe41f6b5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/gtsolutions/pie-register |
purl2cpe | 2026-06-01 10:13:28.142444 |
pkg:github/wp-plugins/pie-register |
purl2cpe | 2026-06-01 10:13:28.142446 |
pkg:github/wpplugins/pie-register |
purl2cpe | 2026-06-01 10:13:28.142448 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-34077 |
vulnerable | 2026-06-08 07:19:02.146669 |
WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE
An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.
Published: 2025-07-09T00:49:28.535Z
Updated: 2026-05-15T11:14:36.227Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-27957 |
vulnerable | 2026-06-08 06:33:25.149434 |
WordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability
CRITICAL (10)
Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register.This issue affects Pie Register: from n/a through 3.8.3.1.
Published: 2024-03-17T16:21:45.638Z
Updated: 2026-04-28T16:09:14.370Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13818 |
vulnerable | 2026-06-08 06:25:38.553514 |
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction <= 3.8.4 - Sensitive Information Exposure via Log Files
MEDIUM (5.3)
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.4 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about users contained in the exposed log files.
Published: 2025-02-21T03:21:20.724Z
Updated: 2026-04-08T17:01:32.412Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-0552 |
vulnerable | 2026-06-08 05:52:31.915426 |
Pie Register < 3.8.2.3 - Open Redirect
The Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability
Published: 2023-02-27T15:24:31.331Z
Updated: 2025-03-18T15:03:46.127Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-4024 |
vulnerable | 2026-06-08 05:51:36.577244 |
Pie Register < 3.8.1.3 - Unauthenticated Arbitrary User Deletion
The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users (along with their posts)
Published: 2022-12-19T13:41:40.069Z
Updated: 2025-04-17T14:15:50.693Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24731 |
vulnerable | 2026-06-08 05:30:39.096597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24647 |
vulnerable | 2026-06-08 05:30:38.939246 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24239 |
vulnerable | 2026-06-08 05:30:04.038534 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15659 |
vulnerable | 2026-06-08 05:12:57.763084 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10969 |
vulnerable | 2026-06-08 05:10:37.561983 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7682 |
vulnerable | 2026-06-08 05:07:01.649755 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-7377 |
vulnerable | 2026-06-08 05:07:00.527849 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-8802 |
vulnerable | 2026-06-08 05:06:10.184263 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.