Vulnerabilities

TI-2024-35062 CVE-2024-52391 · GHSA-2cgr-rv3r-g9vw

WordPress Pie Register Premium plugin < 3.8.3.3 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00297 Published 2024-12-09 Fixed in 3.8.3.3 CWE-862

TI-2024-36020 CVE-2024-53822 · GHSA-xgjj-x9g2-jxw7

WordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in Genetech Pie Register Premium.This issue affects Pie Register Premium: from n/a before 3.8.3.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00772 Published 2024-12-09 Fixed in 3.8.3.3 CWE-434

TI-2024-36019 CVE-2024-53821 · GHSA-jpp3-g63p-46vv

WordPress Pie Register Premium plugin < 3.8.3.3 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Genetech Pie Register Premium allows Reflected XSS.This issue affects Pie Register Premium: from n/a before 3.8.3.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00287 Published 2024-12-06 Fixed in 3.8.3.3 CWE-79

Vulnerabilities

Filters

WordPress Pie Register Premium plugin < 3.8.3.3 - Broken Access Control vulnerability

WordPress Pie Register Premium plugin < 3.8.3.3 - Arbitrary File Upload vulnerability

WordPress Pie Register Premium plugin < 3.8.3.3 - Cross Site Scripting (XSS) vulnerability