CVE-2026-96962 — Pie Register < 3.8.4.14 - Unauthenticated User Email Disclosure via Invitation Code
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to o…
Published: 2026-10-03 · CVSS: 3.7 · CVSS 3.1
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7