The Pie Register plugin for WordPress, versions up to and including 3.8.4, suffers from a CWE-532 vulnerability where sensitive information is inserted into log files that are publicly accessible. This exposure allows unauthenticated remote attackers to view sensitive user information through these logs. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required. The vulnerability affects confidentiality only, with no impact on integrity or availability. No official patch or vendor advisory is currently provided, and no known exploits are reported in the wild.

An unauthenticated attacker can access sensitive user information by viewing publicly exposed log files generated by the vulnerable plugin. This exposure compromises user confidentiality but does not affect the integrity or availability of the system. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to log files and ensure they are not publicly accessible. Monitor for updates from the vendor regarding official patches or mitigations.