UNKNOWN NVD

CVE-2026-96962

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid inv

The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code.

References

https://wpscan.com/vulnerability/bf634ddf-277e-46a4-9e5b-7253b3e02979/

Published: 2026-10-03 · Source: NVD · Feed updated: 2026-10-03

This unknown severity vulnerability was published on 2026-10-03 via NVD.

vulnfeed aggregates 10770 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.