Pie Register – User Registration, Profiles & Content Restriction
Approved changes feed: RSS · Atom
cpe:2.3:a:genetechproducts:pie_register_–_user_registration,_profiles_&_content_restriction:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Genetechproducts (f8bfb860-8421-5166-bcbf-550ad2efed05) |
|---|---|
| Product | Pie Register – User Registration, Profiles & Content Restriction (def723ef-f6a5-5474-b478-fb1945aab296) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-3571 |
vulnerable | 2026-06-08 08:01:18.986355 |
Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.8 - Missing Authorization to Unauthenticated Registration Form Status Modification
MEDIUM (6.5)
The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pie_main() function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attackers to change registration form status.
Published: 2026-04-04T01:24:06.082Z
Updated: 2026-04-08T16:45:02.699Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6069 |
vulnerable | 2026-06-08 06:58:17.644453 |
Pie Register - Basic <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
HIGH (8.8)
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pieregister_install_addon function in all versions up to, and including, 3.8.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins. As a result attackers might achieve code execution on the targeted server
Published: 2024-07-09T08:33:11.030Z
Updated: 2026-04-08T17:17:58.734Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-13818 |
vulnerable | 2026-06-08 06:25:38.552432 |
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction <= 3.8.4 - Sensitive Information Exposure via Log Files
MEDIUM (5.3)
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.8.4 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information about users contained in the exposed log files.
Published: 2025-02-21T03:21:20.724Z
Updated: 2026-04-08T17:01:32.412Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.