Unknown Registration Forms vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Registration Forms, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5MediumCVE-2022-4024genetechsolutions · pie_register +2 morePie Register < 3.8.1.3 - Unauthenticated Arbitrary User DeletionThe Registration Forms WordPress plugin before 3.8.1.3 does not have authorisation and CSRF when deleting users via an init action handler, allowing unauthenticated attackers to delete arbitrary users (along with their posts)EPSS0.35%6.1MediumCVE-2023-0552genetechsolutions · pie_register +2 morePie Register < 3.8.2.3 - Open RedirectThe Registration Forms WordPress plugin before 3.8.2.3 does not properly validate the redirection URL when logging in and login out, leading to an Open Redirect vulnerabilityEPSS24.26%