Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-3571 EUVD-2026-18965GHSA-f2v8-p56h-3qj9

Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.8 - Missing Authorization to Unauthenticated Registration Form Status Modification

Published Apr 4, 2026 · Updated Apr 8, 2026 · Assigned by Wordfence

Description

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pie_main() function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attackers to change registration form status.

Affected products

VendorProductAffectedFixed
genetechproducts Pie Register – User Registration, Profiles & Content Restriction ≤ 3.8.4.8 —

References