Unauthenticated Access Flaw in Pie Register Plugin by WordPress
CVE-2026-96961
Key Information:
- Vendor
WordPress
- Status
- Vendor
- CVE Published:
- 8 November 2026
Badges
What is CVE-2026-96961?
The Pie Register plugin for WordPress (versions up to 3.8.4.15) is vulnerable to an unauthenticated access flaw due to its failure to validate capabilities, nonce, or authentication on certain request handlers. This weakness enables attackers to modify the plugin settings, effectively resetting them to defaults and disabling key security measures such as new-user email verification. Additionally, this vulnerability allows for the potential destruction of the plugin's data table, raising significant concerns regarding data integrity and security.
Affected Version(s)
Pie Register 0 <= 3.8.4.15
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.