CVE-2025-34077: WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE
Genetech Solutions · WordPress Pie Register Plugin
Affected: Genetech Solutions WordPress Pie Register Plugin · Exploitation: check available, not yet exploited
Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.
Higher than 97% of scored CVEs
DescriptionCVE.org
An authentication bypass vulnerability exists in the WordPress Pie Register plugin ≤ 3.7.1.4 that allows unauthenticated attackers to impersonate arbitrary users by submitting a crafted POST request to the login endpoint. By setting social_site=true and manipulating the user_id_social_site parameter, an attacker can generate a valid WordPress session cookie for any user ID, including administrators. Once authenticated, the attacker may exploit plugin upload functionality to install a malicious plugin containing arbitrary PHP code, resulting in remote code execution on the underlying server.
Affected products1
From the CVE record. A product or version that is not listed is unknown, not unaffected.
- Genetech Solutions · WordPress Pie Register Pluginup to and including 3.7.1.4
On the Atlas
Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.
- Exploitation
- Check available, not yet exploited. A public nuclei template can confirm it on a system you are authorised to test.
- CISA KEV
- Not listed
- Public check
- WordPress Pie Register <= 3.7.1.4 - Authentication Bypass · nuclei template in projectdiscovery/nuclei-templates
- Vendor
- Genetech Solutions
- Published
- July 2025
CoverageNo articles yet
No CyberSIXT article names CVE-2025-34077 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.