Unauthenticated Settings Reset and Data Destruction in Pie Register WordPress Plugin

Executive Summary

CVE-2026-96961 is a vulnerability in the Pie Register WordPress plugin versions up to 3.8.4.15. It allows unauthenticated attackers to reset the plugin's settings to default values, disabling security features like email verification for new user registrations. Attackers can also destroy data stored in the plugin's database table.

Useful 0 Not Useful 0

Detection Guidance

Check if your WordPress site uses the Pie Register plugin version prior to 3.8.4.16. Inspect server logs for unusual reset or data destruction requests targeting the plugin's endpoints. Look for unauthenticated POST requests to /wp-admin/admin-ajax.php with actions like 'pie_register_reset_settings' or similar.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability allows attackers to disable security controls such as email verification for new user registrations, potentially allowing unauthorized account creation. It also enables destruction of plugin data, which could lead to loss of user registration information and settings.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could impact compliance by allowing unauthorized access to user data through disabled security controls. It may lead to violations of data protection requirements such as GDPR's integrity and confidentiality principles or HIPAA's access controls, depending on how the plugin is used.

Useful 0 Not Useful 0

Mitigation Strategies

Update the Pie Register plugin to version 3.8.4.16 or later immediately. Disable the plugin if not in use. Review and reset plugin settings to secure defaults. Monitor for suspicious activity in logs.

Useful 0 Not Useful 0