CVE-2022-4024: Genetechsolutions Pie Register

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

The Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users (along with their posts)

Affected products

• Genetechsolutions Pie Register: before 3.8.1.3 (fixed in 3.8.1.3)

Published 2022-12-19. Last modified 2026-06-17.