← WordPress Vulnerabilities
WordPress security by component

Pie Register

Pie Register is a WordPress component with 18 published CVE records in this archive. The latest tracked vulnerability was published Jun 22, 2026; the highest CVE/CNA score is 10.

Plugin slug: pie-register

CVE-2026-10530: Pie Register: A security weakness

Pie Register is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is < 3.8.4.10.

PublishedJun 22, 2026
Known safe version3.8.4.10
Safe version
Jun 22, 2026 CVE-2026-10530
Pie Register: A security weakness
Pie Register is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is < 3.8.4.10.
3.8.4.10
CVE5.3
NVDPending
Jan 23, 2026 CVE-2026-24577
Pie Register: A security weakness
Pie Register is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.3
NVDPending
Jul 09, 2025 CVE-2025-34077
Pie Register: Code execution
Pie Register is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE10.0
NVDPending
Feb 21, 2025 CVE-2024-13818
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction: Sensitive information exposure
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction is affected by sensitive information exposure. The vulnerable path is reachable without authentication. Successful exploitation can disclose data that should not be available to the caller.
See mitigation notes
CVE5.3
NVD7.5
Jul 09, 2024 CVE-2024-6069
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction: A security weakness
Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE8.8
NVDPending
May 24, 2024 CVE-2024-4544
Pie Register - Social Sites Login (Add on): Privilege escalation or authentication bypass
Pie Register - Social Sites Login (Add on) is affected by privilege escalation or authentication bypass. The vulnerable path is reachable without authentication. A successful request can grant permissions or access that the caller should not possess.
See mitigation notes
CVE9.8
NVDPending
Mar 17, 2024 CVE-2024-27957
Pie Register: Dangerous file upload
Pie Register is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
See mitigation notes
CVE10.0
NVD9.8
Feb 27, 2023 CVE-2023-0552
Registration Forms: An open redirect
Registration Forms is affected by an open redirect. Exposure depends on how the affected operation is made reachable by the site. A crafted link can redirect visitors from the trusted site to an attacker-controlled destination.
See mitigation notes
CVE5.4
NVD5.4
Dec 19, 2022 CVE-2022-4024
Registration Forms: Cross-site request forgery
Registration Forms is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
See mitigation notes
CVE6.5
NVD6.5
Nov 08, 2021 CVE-2021-24731
Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes: SQL injection
Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD9.8
Nov 08, 2021 CVE-2021-24647
Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes: A security weakness
Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE8.1
NVD8.1
Apr 22, 2021 CVE-2021-24239
Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments: Cross-site scripting
Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1
Aug 27, 2019 CVE-2019-15659
Pie Register: SQL injection
Pie Register is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD9.8
Jun 17, 2018 CVE-2018-10969
Pie Register: SQL injection
Pie Register is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD9.8
Oct 16, 2015 CVE-2015-7682
Pie Register: SQL injection
Pie Register is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE6.5
NVD6.5
Oct 16, 2015 CVE-2015-7377
Pie Register: Cross-site scripting
Pie Register is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.3
NVD4.3
Jan 23, 2015 CVE-2014-8802
Pie Register: A security weakness
Pie Register is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE5.0
NVD5.0
Jul 29, 2013 CVE-2013-4954
Pie Register: Cross-site scripting
Pie Register is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE2.6
NVD2.6