CVE-2026-10530— Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable Token
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Unknown | Pie Register | < 3.8.4.10 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-10530
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Pie Register < 3.8.4.10 - Unauthenticated Email Verification Bypass via Predictable Token
Source: CVE Program / CVE List V5
Vulnerability Description
The Pie Register WordPress plugin before 3.8.4.10 does not use sufficiently random values when generating its account verification tokens, allowing unauthenticated attackers to predict a valid token and activate an account without access to the associated email inbox.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Genetech Products Pie Register 加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
genetechsolutions pie register是genetechsolutions公司的一个用户注册管理插件。 Genetech Products Pie Register 3.8.4.10之前版本存在加密问题漏洞，该漏洞源于生成账户验证令牌时未使用足够随机的值，可能导致未经身份验证的攻击者预测有效令牌并激活账户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Unknown | Pie Register | 0 ~ 3.8.4.10 | - |
II. Public POCs for CVE-2026-10530
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-10530
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-10530 (1)
- 🔗 Pie Register < 3.8.4.10 – Unauthenticated Email Verification Bypass via Predictable Token | CVE 2026-10530 | Plugin Vulnerabilities Read full article exploitvdb-entrytechnical-description
Same Patch Batch · Unknown · 2026-06-22 · 6 CVEs total
| CVE-2026-7859 | Motors Car Dealership & Classified Listings < 1.4.110 - Unauthenticated Post-Meta Write vi | |
| CVE-2026-6858 | Transbank Webpay < 1.14.0 - Unauthenticated Stored XSS | |
| CVE-2026-8157 | Vitepos < 3.4.2 - Outlet Manager+ Privilege Escalation | |
| CVE-2026-4110 | Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_auctions_bids_list | |
| CVE-2026-4259 | Ultimate WooCommerce Auction Pro <= 2.4.5 - Reflected XSS via uwa_manage_auctions |
IV. Related Vulnerabilities
Same vendor: Unknown
- CVE-2026-77001
Social Login & Sharing buttons with Analytics By SoClever <= - CVE-2026-77002
SmilePass Selfie Login <= 1.0.2 - Unauthenticated Authentica - CVE-2026-77000
WP Social Media Login <= 1.0.6 - Unauthenticated Account Tak - CVE-2026-19222
Forminator Forms < 1.57.0.7 - Authenticated Privilege Escala - CVE-2026-19093
Tutor LMS < 4.0.6 - Instructor+ Arbitrary File Read via Vide
V. Comments for CVE-2026-10530
No comments yet