CVE-2026-10530 — Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable Token
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to…
Published: 2026-06-22 · CVSS: 5.3 · CVSS 3.1
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to predict a valid token and activate an account without access to the associated email inbox.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7