Vulnerability record/PUBLISHED/Published Nov 8, 2026 06:00:29 UTC
CVE-2026-96963
The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as contributor to modify existing administrator-created invitation-code records.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityWPScan
Last updatedNov 8, 2026 06:00:29 UTC
PublishedNov 8, 2026 06:00:29 UTC
ReservedSep 23, 2026 20:37:03 UTC
Credits
- sungbyeongchan
- WPScan