CVE-2026-103345
MediumCVSS 5.3Summary
Pie Register plugin has a sensitive information insertion vulnerability, allowing retrieval of embedded sensitive data. Affects versions up to 3.8.4.13.
Risk Assessment
Sensitive data may be exposed in sent data, potentially leading to information leakage.
Recommendation
Update the plugin to the latest version and review what data is sent in requests.
Other vulnerabilities in Pie Register
See all- CVE-2026-119488High
The WordPress Pie Register plugin in versions up to 3.8.4.15 contains an improper neutralization of input during web page generation (cross-site scripting) vulnerability, enabling stored XSS.
- CVE-2026-3571Medium
The Pie Register plugin for WordPress has a missing capability check in the pie_main() function, allowing unauthenticated attackers to change registration form status. Affects versions up to and including 3.8.4.8.
Original NVD description (English source)
Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS