CyberRota Analysis
AI-GeneratedThe Pie Register plugin for WordPress versions prior to 3.8.4.14 is vulnerable due to inadequate access controls on invitation-code reports, enabling unauthenticated users with a valid invitation code to access sensitive information, including usernames and email addresses of all users associated with that code. This exposure can lead to privacy breaches and targeted phishing attacks. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate these risks.
Original NVD Description
The Pie Register WordPress plugin before 3.8.4.14 does not restrict access to an invitation-code report, allowing unauthenticated visitors who know a valid invitation code to obtain the username and email address of every user who registered with that code.