Pie Register < 3.8.4.16 - Unauthenticated Plugin Settings Reset and Redirect Data Destruction

Description

The plugin does not perform any capability, nonce or authentication check on one of its request handlers, allowing unauthenticated attackers to reset the plugin's settings to their defaults (disabling registration security controls such as new-user email verification) and to destroy a plugin data table.