CVE-2026-96961

{
  "etk_id": "ETK-2026-3885",
  "cve_id": "CVE-2026-96961",
  "display_id": "CVE-2026-96961",
  "ghsa_id": "GHSA-m587-3v6q-xg7x",
  "euvd_id": "EUVD-2026-119466",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Unauthenticated authorization bypass in Pie Register",
  "summary": "Pie Register for WordPress through version 3.8.4.15 is affected by an improperly protected request handler. An unauthenticated remote attacker can reset plugin configuration, potentially disabling registration safeguards, and delete the plugin's data table; the plugin must be installed and reachable.",
  "mitigation": "Disable Pie Register or restrict unauthenticated access to the affected WordPress site until a remediated release is verified. Upgrade to a vendor-supported version newer than 3.8.4.15 when the vendor confirms the fix.",
  "vendor": null,
  "product": "Pie Register",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, <= 3.8.4.15"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "Pie Register",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": null,
  "cvss_src": null,
  "cvss_vector": null,
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 15.262500366666666,
  "t0_at": "2026-11-08T06:00:28.890000+00:00",
  "signals": {
    "check": {
      "at": "2026-11-08T08:06:55.344051+00:00",
      "days": 0.08780618114583333,
      "is_lower_bound": false,
      "measured_at": "2026-11-08T06:00:28.890000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-08T06:00:28.890000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-11-08T06:00:28.890000+00:00",
      "url": "https://github.com/advisories/GHSA-m587-3v6q-xg7x"
    }
  }
}