CVE-2026-96961

{
  "etk_id": "ETK-2026-3885",
  "cve_id": "CVE-2026-96961",
  "display_id": "CVE-2026-96961",
  "ghsa_id": "GHSA-m587-3v6q-xg7x",
  "euvd_id": null,
  "status": "in_pipeline",
  "anchor_state": "anchored",
  "title": "Unauthenticated settings reset and data deletion in Pie Register",
  "summary": "Pie Register for WordPress through 3.8.4.15 is affected by an unauthenticated request-handler flaw. An unauthenticated attacker can restore plugin settings to defaults, potentially disabling registration protections, and can delete plugin table data. Exploitation requires the affected plugin to be installed and reachable by the attacker.",
  "mitigation": "Restrict public access to the affected WordPress site or disable Pie Register until an updated release is available. Review plugin settings and data tables for unauthorized resets or deletion.",
  "vendor": null,
  "product": "Pie Register",
  "affected": [],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": null,
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": null,
  "t0_at": "2026-11-08T06:00:28.890000+00:00",
  "signals": {
    "trigger_signal": {
      "at": "2026-11-08T06:00:28.890000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-08T06:00:28.890000+00:00",
      "url": "https://github.com/advisories/GHSA-m587-3v6q-xg7x"
    }
  }
}