Threats tagged 'ghsa-m587-3v6q-xg7x'

The Pie Register WordPress plugin versions through 3.8.4.15 have a vulnerability where one of its request handlers lacks capability, nonce, or authentication checks. This allows unauthenticated attackers to reset the plugin's settings to defaults, disabling registration security controls like new-user email verification, and to destroy a plugin data table.