CVE-2024-27957 WordPress Pie Register plugin <= 3.8.3.1 - Unauthenticated Arbitrary File Upload vulnerability

What is CVE-2024-27957?

CVE-2024-27957 is a critical vulnerability in Pie Register, published on 17 Mar 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Unrestricted Upload of File with Dangerous Type vulnerability in Pie Register.This issue affects Pie Register: from n/a through 3.8.3.1.

Weakness: CWE-434

Which versions are affected by CVE-2024-27957?

It affects 1 product.

Products include Genetechsolutions Pie Register.

How do I fix CVE-2024-27957?

No fix has been published for CVE-2024-27957 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-27957 being exploited?

There is no known exploitation of CVE-2024-27957 in the wild and no public exploit code.

Other vulnerabilities in Pie Register

• CVE-2021-24731 Pie Register < 3.7.1.6 - Unauthenticated SQL Injection Critical 9.8
• CVE-2019-15659 SQL injection in n/a Critical 9.8
• CVE-2018-10969 SQL injection in n/a Critical 9.8
• CVE-2021-24647 Pie Register < 3.7.1.6 - Unauthenticated Arbitrary Login High 8.1
• CVE-2022-4024 Pie Register < 3.8.1.3 - Unauthenticated Arbitrary User Deletion Medium 6.5

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CVE-2023-4859, GHSA-g7q8-mh4r-mmx4.