VulnCrest
Search
Create account
Report an incident
Radar sectionsPlugins & themes
Check my site

WordPress plugin

Pie Register – User Registration, Profiles & Content Restriction security & vulnerabilities

pie-register— active installsLast vulnerability Nov 6, 2026

No known unpatched vulnerabilities in the latest version

All 29 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin
29Known vulnerabilities
  • Critical7
  • High7
  • Medium15
  • Low0
Vulnerabilities per year
2014: 1 vulnerability1142015: 6 vulnerabilities6152018: 2 vulnerabilities2182019: 1 vulnerability1192021: 5 vulnerabilities5212022: 1 vulnerability1222023: 1 vulnerability1232024: 2 vulnerabilities2242025: 1 vulnerability1252026: 9 vulnerabilities926

All Pie Register – User Registration, Profiles & Content Restriction vulnerabilities

Pie Register – User Registration, Profiles & Content Restriction vulnerabilities
SeverityVulnerabilityCVEPublished
High7.2Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter via Comment Avatar
≤3.8.4.16Update to 3.8.4.17
CVE-2026-119158
Medium4.3Missing Authorization
≤3.8.4.15Update to 3.8.4.16
CVE-2026-96963
Medium5.3Missing Authorization
≤3.8.4.15Update to 3.8.4.16
CVE-2026-96961
High7.2Unauthenticated Stored Cross-Site Scripting
≤3.8.4.15Update to 3.8.4.16
CVE-2026-119488
Medium5.3Unauthenticated Information Exposure
≤3.8.4.13Update to 3.8.4.14
CVE-2026-103345
Medium5.3Unauthenticated Information Exposure
≤3.8.4.13Update to 3.8.4.14
CVE-2026-96962
Medium5.3Missing Authorization
<3.8.4.10Update to 3.8.4.10
CVE-2026-10530
Medium6.5Missing Authorization to Unauthenticated Registration Form Status Modification
≤3.8.4.8Update to 3.8.4.9
CVE-2026-3571
Medium5.3Missing Authorization
≤3.8.4.8Update to 3.8.4.9
CVE-2026-24577
Medium5.3Sensitive Information Exposure via Log Files
≤3.8.4Update to 3.8.4.1
CVE-2024-13818
High8.8Basic <= 3.8.3.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
≤3.8.3.4Update to 3.8.3.5
CVE-2024-6069
Critical9.8Unauthenticated Arbitrary File Upload
≤3.8.3.2Update to 3.8.3.3
CVE-2024-27957
Medium6.1Open Redirect
≤3.8.2.2Update to 3.8.2.3
CVE-2023-0552
Medium6.5Missing Authorization to Arbitrary User Deletion
≤3.8.1.2Update to 3.8.1.3
CVE-2022-4024
Medium6.1Open Redirect
<3.7.2.4Update to 3.7.2.4
—
High8.1Authentication Bypass
<3.7.1.6Update to 3.7.1.6
CVE-2021-24647
Critical9.8Authentication Bypass
≤3.7.1.4Update to 3.7.1.5
CVE-2025-34077
Critical9.8Unauthenticated SQL Injection
<3.7.1.6Update to 3.7.1.6
CVE-2021-24731
Medium6.1Reflected Cross-Site Scripting
<3.7.0.1Update to 3.7.0.1
CVE-2021-24239
Critical9.8SQL Injection
<3.1.2Update to 3.1.2
CVE-2019-15659
High7.1Unauthenticated Cross-Site Scripting
<3.0.18Update to 3.0.18
—
Critical9.8SQL Injection
≤3.0.9Update to 3.0.10
CVE-2018-10969
Medium6.1Reflected Cross-Site Scripting
<2.0.19Update to 2.0.19
CVE-2015-7377
Medium6.3Authenticated SQL Injection
<2.0.19Update to 2.0.19
CVE-2015-7682
Critical9.8SQL Injection
2.0.14 – 2.0.15Update to 2.0.16
—
Critical9.82.0.15 - Authentication Bypass
2.0.14 – 2.0.15Update to 2.0.16
—
High7.1Cross-Site Scripting
<2.0.15Update to 2.0.15
—
High7.3Missing Authorization
≤2.0.13Update to 2.0.14
CVE-2014-8802
Medium6.1Multiple Cross-Site Scripting
≤1.30Update to 1.31
CVE-2013-4954

Pie Register – User Registration, Profiles & Content Restriction: common questions

Does Pie Register – User Registration, Profiles & Content Restriction have known vulnerabilities?

Yes. VulnCrest Radar lists 29 known vulnerabilities in Pie Register – User Registration, Profiles & Content Restriction: 7 critical, 7 high, 15 medium. None are known to affect version null.

How do I check which version of Pie Register – User Registration, Profiles & Content Restriction I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Pie Register – User Registration, Profiles & Content Restriction vulnerability?

CVE-2026-119158, published Nov 6, 2026: Pie Register <= 3.8.4.16 - Unauthenticated Stored Cross-Site Scripting via 'first_name' Parameter via Comment Avatar. Severity: High (CVSS 7.2).

Is any Pie Register – User Registration, Profiles & Content Restriction vulnerability listed in CISA KEV?

No. None of the known Pie Register – User Registration, Profiles & Content Restriction vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Jump to

Are you sure?