CVE-2026-3571
Received Received - Intake
Unauthorized Data Modification in Pie Register Plugin via Missing Capability Check

Publication date: 2026-04-04

Last updated on: 2026-04-04

Assigner: Wordfence

Description
The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pie_main() function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attackers to change registration form status.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-04-04
Last Modified
2026-04-04
Generated
2026-06-16
AI Q&A
2026-04-04
EPSS Evaluated
2026-06-15
NVD
CVE-2026-3571
EUVD
EUVD-2026-18965
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
pie_register pie_register to 3.8.4.8 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress has a vulnerability due to a missing capability check in the pie_main() function in all versions up to and including 3.8.4.8. This flaw allows unauthenticated attackers to modify data by changing the registration form status without proper authorization.

Impact Analysis

This vulnerability can impact you by allowing unauthorized users to change the status of registration forms on your WordPress site. Since the vulnerability permits unauthenticated attackers to modify registration form data, it can lead to unauthorized changes in user registration processes, potentially disrupting user management and access controls.

Compliance Impact

The vulnerability in the Pie Register plugin allows unauthenticated attackers to modify registration form status due to a missing capability check. This unauthorized modification of data could potentially lead to improper handling of user registration data.

Such unauthorized data modification may impact compliance with data protection regulations like GDPR and HIPAA, which require strict controls over personal data integrity and access. If attackers can alter registration data without authorization, it could result in violations of these standards concerning data accuracy, user consent, and security.

However, the provided information does not explicitly state the direct compliance impact or any regulatory consequences.

Mitigation Strategies

To mitigate the vulnerability CVE-2026-3571 in the Pie Register WordPress plugin, you should immediately update the plugin to version 3.8.4.9 or later.

This update includes a comprehensive security fix that addresses the unauthorized modification of data by adding proper capability checks and revising authentication and user management components.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-3571. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart