{"affected":[{"defaultStatus":"unknown","product":"Pie Register","source":"CNA: WPScan","vendor":"Unknown","versions":[{"lessThanOrEqual":"3.8.4.15","status":"affected","version":"0","versionType":"semver"}]}],"cveId":"CVE-2026-96963","cwes":["CWE-862"],"description":"The Pie Register  WordPress plugin through 3.8.4.15 does not perform an authorisation check in one of its AJAX actions, allowing users with a role as low as contributor to modify existing administrator-created invitation-code records.","epss":null,"exploits":[{"kind":"exploit","source":"CNA: WPScan","url":"https://wpscan.com/vulnerability/0501d724-f5cf-4b71-a463-0ab86b2ea8b5/"}],"kev":null,"metrics":[],"modifiedAt":1794117629071,"publishedAt":1794117629071,"references":[{"source":"CNA: WPScan","tags":["exploit","vdb-entry","technical-description"],"url":"https://wpscan.com/vulnerability/0501d724-f5cf-4b71-a463-0ab86b2ea8b5/"}],"remediation":[],"revision":"fdee252da88132bd28df3e2548ee0550c26ee184b21451689f5562ad1f2ef7bc","sources":[{"modifiedAt":1794117629071,"name":"CNA: WPScan","retrievedAt":1794118121354,"url":"https://www.cve.org/CVERecord?id=CVE-2026-96963"}],"ssvc":null,"status":"published","title":"Pie Register <= 3.8.4.15 - Contributor+ Invitation Code Modification","updatedAt":1794118121354}