Pie Register – User Registration, Profiles & Content Restriction < 3.8.4.9 - Missing Authorization to Unauthenticated Registration Form Status Modification

Description

The Pie Register – User Registration, Profiles & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pie_main() function in all versions up to, and including, 3.8.4.8. This makes it possible for unauthenticated attackers to change registration form status.