CVE-2026-103345

MediumCVSS 5.3

Published: 01/10/2026(UTC)Updated: 01/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Summary

Pie Register plugin has a sensitive information insertion vulnerability, allowing retrieval of embedded sensitive data. Affects versions up to 3.8.4.13.

Risk Assessment

Sensitive data may be exposed in sent data, potentially leading to information leakage.

Recommendation

Update the plugin to the latest version and review what data is sent in requests.

Other vulnerabilities in Pie Register

CVE-2026-3571Medium
The Pie Register plugin for WordPress has a missing capability check in the pie_main() function, allowing unauthenticated attackers to change registration form status. Affects versions up to and including 3.8.4.8.

Original NVD description (English source)

Insertion of Sensitive Information Into Sent Data vulnerability in Shamim Rajani Pie Register pie-register allows Retrieve Embedded Sensitive Data.This issue affects Pie Register: from n/a through 3.8.4.13.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS