medium5.3
CVE-2026-10530
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthentic…
Impact
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to predict a valid token and activate an account without access to the associated email inbox.
Affected products
| Product | Affected versions |
|---|---|
| Pie Register WordPress Plugin | before 3.8.4.10 |
Versions were read from the advisory text. No structured product data has been published for this record yet.