Unknown Pie Register vulnerabilities

2 CVEs affecting Unknown Pie Register, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-96962, published 2026-10-03.

More from Unknown.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2026-10530, published 2026-06-22. Medium severity, CVSS 5.3. EPSS: 0.2% chance of exploitation in the next 30 days. The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to predict a valid token…
• CVE-2026-96962, published 2026-10-03. Low severity, CVSS 3.7. EPSS: 0.2% chance of exploitation in the next 30 days. The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and…