CVE-2026-96963
Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as contributor to modify existing administrator-created invitation-code records.
What each source reports
CVE List No score
Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification
The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as contributor to modify existing administrator-created invitation-code records.
- Record
CVE-2026-96963- Updated
- 2026-11-08
GitHub AdvisoriesGHSA-2mgp-38q6-99x9 No score
The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in...
The Pie Register WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as contributor to modify existing administrator-created invitation-code records.
- Record
GHSA-2mgp-38q6-99x9- Updated
- 2026-11-08
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases, references | GitHub Advisories | |
| first indexed | CVE List |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-96963 is a vulnerability with no CVSS score yet in Unknown Pie Register, published November 8, 2026. No source lists public exploit code. No source names a fixed version.