CVE-2014-8802

NONE EPSS 93.9%

Published Jan 23, 201511y ago · Modified Jun 17, 20262w ago

Published Jan 23, 2015 11y ago

Last Modified Jun 17, 2026 2w ago

Description

The Pie Register plugin before 2.0.14 for WordPress does not properly restrict access to certain functions in pie-register.php, which allows remote attackers to (1) add a user by uploading a crafted CSV file or (2) activate a user account via a verifyit action.

Threat Intelligence

EPSS Exploit Probability

93.9% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-264

Affected Products 1

Vendor	Product	Version	Range
genetechsolutions	pie_register	*	≤2.0.13

References 3

secunia.com http://secunia.com/advisories/62351
security.szurek.pl http://security.szurek.pl/pie-register-2013-privilege-escalation.html

Exploit
wordpress.org https://wordpress.org/plugins/pie-register/changelog/

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.