CVE-2026-119488: WordPress Pie Register plugin <= 3.8.4.15 - Cross Site Scripting (XSS) vulnerability

Q: Which Pie Register versions are affected?

The issue affects Pie Register through version 3.8.4.15. The earliest affected version is not specified.

Q: What is the impact of this issue?

This is a stored cross-site scripting vulnerability. Malicious input can be stored and later executed when rendered in a web page.

Published Nov 6, 2026

Updated

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Shamim Rajani Pie Register pie-register allows Stored XSS.This issue affects Pie Register: from n/a through 3.8.4.15.

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade WordPress Pie Register plugin to a version that resolves this vulnerability.
Fixed in 3.8.4.16

Event History

Nov 6, 2026

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·08:17 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Which Pie Register versions are affected?

The issue affects Pie Register through version 3.8.4.15. The earliest affected version is not specified.

What is the impact of this issue?

This is a stored cross-site scripting vulnerability. Malicious input can be stored and later executed when rendered in a web page.

CVE-2026-119488: WordPress Pie Register plugin <= 3.8.4.15 - Cross Site Scripting (XSS) vulnerability

Remediation

Event History

Frequently Asked Questions

Which Pie Register versions are affected?

What is the impact of this issue?

Company

Resources

Contact

Frequently Asked Questions

Which Pie Register versions are affected?

What is the impact of this issue?