Pie Register WordPress Plugin Missing Authorization Vulnerability Allows Unauthenticated Data Modification

A vulnerability exists in the Pie Register WordPress plugin, specifically in the User Registration, Profiles & Content Restriction version 3.8.4.8 and earlier. The issue arises from a lack of proper capability checks in the pie_main() function, enabling unauthenticated attackers to unauthorizedly modify registration form statuses.

Impact

Exploitation of this vulnerability allows for unauthorized changes to be made to registration form statuses, potentially disrupting the user registration process or mismanaging user data.

Remediation

Users are advised to update the Pie Register WordPress plugin to version 3.8.4.9 or a later patched version.