CVE-2026-10530
Description
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to predict a valid token and activate an account without access to the associated email inbox.
Metadata
Severity & Metrics
No CVSS data available.
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Unknown | Pie Register | — | 0 < 3.8.4.10 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| — | cna | CWE-326 Inadequate Encryption Strength |