Priority LOW 31
The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'first_name' parameter in all versions up to, and including, 3.8.4.16 due to…
CVSS 3.1HIGH 7.2· Network · No auth · No interaction · EPSS 0.00297 · Published 2026-11-07 · No fix listed CWE-79
Priority LOW 35
The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pie_main() function in all versions up…
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00295 · Published 2026-04-04 · No fix listed CWE-862
Priority LOW 30
Missing Authorization vulnerability in Genetech Products Pie Register pie-register allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Pie Register: from n/a through <= 3.8.4.8.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00254 · Published 2026-01-23 · No fix listed CWE-862
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Genetech Products Web and WooCommerce Addons for WPBakery Builder vc-addons-by-bit14 allows DOM-Based XSS.This issue a…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00193 · Published 2025-12-31 · No fix listed CWE-79
Priority LOW 38
The Pie Forms for WP plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 1.6 via the format_classic function.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00704 · Published 2025-11-18 · No fix listed CWE-434
Priority LOW 27
The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'page' parameter in all ve…
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00293 · Published 2024-12-07 · No fix listed CWE-79
Priority LOW 20
The Web and WooCommerce Addons for WPBakery Builder plugin for WordPress is vulnerable to unauthorized plugin settings modification due to a missing capability check on several plugin functions in all versions up to, and…
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00359 · Published 2024-07-16 · No fix listed CWE-862
Priority MEDIUM 41
The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00631 · Published 2024-07-09 · No fix listed CWE-862