genetechsolutions pie-register vulnerabilities and exploits

(subscribe to this query)

NA

Multiple cross-site scripting (XSS) vulnerabilities in wp-login.php in the Genetech Solutions Pie-Register plugin prior to 1.31 for WordPress, when "Allow New Registrations to set their own Password" is enabled, allow remote malicious users to inject arbitrary web scrip...

1 EDB exploit

NA

The Pie Register plugin prior to 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote malicious users to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.

Genetechsolutions Pie Register

1 EDB exploit

NA

Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin prior to 2.0.19 for WordPress allow remote administrators to execute arbitrary SQL commands via the (1) select_invitaion_code_bulk_option or (2) invi_del_id parameter in the pie-inv...

Genetechsolutions Pie Register

5.4

CVSSv3

The Registration Forms WordPress plugin prior to 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerability

Genetechsolutions Pie Register

6.1

CVSSv3

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin prior to 3.7.0.1 does not sanitise the invitaion_code GET parameter when outputting it in the Activation Code page, leading to a reflected Cross-Site Scriptin...

Genetechsolutions Pie Register

NA

Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin prior to 2.0.19 for WordPress allows remote malicious users to inject arbitrary web script or HTML via the invitaion_code parameter in a pie-register page to the default URI.

Genetechsolutions Pie Register

9.8

CVSSv3

The pie-register plugin prior to 3.1.2 for WordPress has SQL injection, a different issue than CVE-2018-10969.

Genetechsolutions Pie Register

9.8

CVSSv3

SQL injection vulnerability in the Pie Register plugin prior to 3.0.10 for WordPress allows remote malicious users to execute arbitrary SQL commands via the invitation codes grid.

Genetechsolutions Pie Register

1 EDB exploit

9.8

CVSSv3

The Registration Forms – User profile, Content Restriction, Spam Protection, Payment Gateways, Invitation Codes WordPress plugin prior to 3.7.1.6 does not properly escape user data before using it in a SQL statement in the wp-json/pie/v1/login REST API endpoint, leading to ...

Genetechsolutions Pie Register

6.5

CVSSv3

The Registration Forms WordPress plugin prior to 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated malicious users to delete arbitrary users (along with their posts)

Genetechsolutions Pie Register

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook