Software intelligence

Pie Register vulnerabilities

23 tracked advisories · slug pie-register

Important: Pie Register appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

Latest advisory

22 June 2026

CISA KEV matches

In this WordPress feed

WordPress slug

pie-register

Plugin

What this means for Pie Register

This catalog lists 23 known advisories affecting Pie Register. The most recent was published on 22 June 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

Pie Register – User Registration, Profiles & Content Restriction < 3.8.4.10 - Missing Authorization
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 22 June 2026
Pie Register – User Registration, Profiles & Content Restriction <= 3.8.4.8 - Missing Authorization to Unauthenticated Registration Form Status Modification
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 3 April 2026
Pie Register <= 3.8.4.8 - Missing Authorization
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 20 January 2026

Vulnerability types

SQL injection5
Cross-site scripting5
Authentication bypass3
Remote code execution1

Authentication (inferred from titles)

Unauthenticated4
Authenticated2
Unspecified17

Advisory history

Known Pie Register advisories published by month.

Oct 25

Nov 25

Dec 25

Jan 26

Feb 26

Mar 26

Apr 26

May 26

Jun 26

Jul 26

Aug 26

Sept 26

All advisories

Pie Register <= 3.0.9 - SQL Injection
CVE-2018-10969 · Published 12 June 2018
Affected versions: ≤ 3.0.9
Pie Register – User Registration Forms < 2.0.19 - Reflected Cross-Site Scripting
CVE-2015-7377 · Published 12 October 2015
Affected versions: < 2.0.19
Pie Register – User Registration Forms < 2.0.19 - Authenticated SQL Injection
CVE-2015-7682 · Published 12 October 2015
Affected versions: < 2.0.19
Registration Forms – User Profile, Custom Registration Form, Login Form, Invitation-Based Registrations for WordPress 2.0.14 - 2.0.15 - Authentication Bypass
No CVE assigned · Published 4 May 2015
Affected versions: ≥ 2.0.14 and ≤ 2.0.15
Pie Register 2.0.14-2.0.15 - SQL Injection
No CVE assigned · Published 4 May 2015
Affected versions: ≥ 2.0.14 and ≤ 2.0.15
Pie Register < 2.0.15 - Cross-Site Scripting
No CVE assigned · Published 9 March 2015
Affected versions: < 2.0.15
Pie Register <= 2.0.13 - Missing Authorization
CVE-2014-8802 · Published 17 January 2015
Affected versions: ≤ 2.0.13
Pie Register <= 1.30 - Multiple Cross-Site Scripting
CVE-2013-4954 · Published 1 August 2014
Affected versions: ≤ 1.30

9–16 of 23

2 / 2

Check whether your installed version is affected

SiteRespond Defence matches your installed Pie Register version against this catalog when the Defence plugin is connected to your WordPress site.

Start SiteRespond Defence for WordPress — £29.99/monthScan your website