CVE-2014-8802

The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers…

published January 23, 2015

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07363 · 94.4th percentile
Published
2015-01-23T15:00Z
EPSS history
Timeline
  • 23 JAN 15:00Z
    The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers…
    cvelistv5