The vulnerability is a missing authorization requirement in the Pie Register plugin for WordPress. Because the plugin does not enforce proper access control, users with insufficient privileges can exploit the component to perform actions that should be restricted, potentially allowing them to read or modify data that should be protected. This weakness is classified as CWE‑862, reflecting a broken access control flaw.

Affected products are Genetech Products Pie Register, a WordPress plugin. All versions up to and including 3.8.4.8 are impacted, as the issue exists from inception through the indicated latest version. No other product or platform versions are listed in the CVE data.

The CVSS score of 5.3 indicates moderate severity, while the EPSS score of less than 1% suggests that the vulnerability is currently underutilized. The attack vector is likely a web‑based interaction with a WordPress site, with an attacker needing the ability to send crafted requests to the plugin’s endpoints. If an attacker can authenticate with a user account that has elevated privileges or can manipulate the request parameters, the missing checks can be leveraged to perform unauthorized actions. The lack of an entry in CISA’s KEV catalog means no publicly known exploits are confirmed, but the moderate CVSS indicates that once exploited, the impact could include unauthorized data access or modification.