WordPress Plugin Vulnerabilities

Pie Register < 3.1.2 - SQL Injection

Description

The Pie Register – User Registration Forms. Invitation based registrations, Custom Login, Payments WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
pie-register
Fixed in 3.1.2

References

CVE
CVE-2019-15659

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
9.8 (critical)

Miscellaneous

Verified
No
WPVDB ID
44262b4f-d6fa-4333-ac95-d970d93e0802

Timeline

Publicly Published
2019-07-03 (about 4 years ago)
Added
2019-08-27 (about 4 years ago)
Last Updated
2020-09-22 (about 3 years ago)

Other

Published
Title
Published
2015-06-02
Title
LeagueManager <= 3.9.11 - Unauthenticated SQL Injection
Published
2023-11-28
Title
WordPress Brute Force Protection < 2.2.6 - Admin+ SQLi
Published
2022-12-12
Title
LetsRecover < 1.2.0 - Unauthenticated SQLi
Published
2024-03-26
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 5.3.2.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Published
2024-04-11
Title
Advanced Page Visit Counter <= 8.0.6 - Authenticated (Administrator+) SQL Injection