S4E just found a high-severity finding from top 10 tcp port service scan
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
medium·Product Based Web Vulnerabilities·Updated Jan 3, 2024

CVE-2015-7377 Scanner

CVE-2015-7377 scanner - Cross-Site Scripting (XSS) vulnerability in Pie Register plugin for WordPress

Est. Time~10 seconds
Scan TypeSingle Scan
Targetsurl
CostFree
3.4k
Times Used
continuous scan runs
3.7k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
CVECVE-2015-7377
4.3
CVSS

Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remote attackers to inject arbitrary web script or HTML via the invitaion_code parameter in a pie-register page to the default URI.

Attack Vector
-
Privileges Req.
-
User Interaction
-
Affected
n/aby n/a
n/a
Updated Aug 22, 2026View on NVD →
Detail

Pie Register is a popular plugin used by WordPress users to create custom registration forms for their websites. With Pie Register, website owners can design forms that suit their branding needs and capture user data directly to their databases. Pie Register is simple to set up and use, and it comes loaded with features such as captcha protection, custom email notification, and reCAPTCHA integration.

CVE-2015-7377 is a vulnerability that has been detected in Pie Register. This vulnerability stems from a Cross-site scripting (XSS) error present in the pie-register/pie-register.php file. Remote attackers can exploit this flaw by injecting malicious code and HTML via the invitation_code parameter in pie-register pages to the default URI. This vulnerability in Pie Register can open doors to cybercriminals to gain unauthorized access to website data and perform malicious activities.

If exploited, the CVE-2015-7377 vulnerability in Pie Register can lead to serious security breaches. Attackers can take advantage of their access to website user data to perform phishing attacks, install malware, and engage in malvertising campaigns. These attacks can damage a website's reputation, and cost website owners huge sums of money in terms of lost revenue, legal fees, and fines.

Thanks to the pro features of S4E platform, individuals who read this article can easily learn about vulnerabilities present in their digital assets. S4E provides real-time monitoring of websites, detects vulnerabilities, and provides easy-to-follow remediation steps to fix any detected security risks. By subscribing to S4E, you can secure your website from cyber-attacks and keep it safe from future threats.

 

REFERENCES

Solution Advice

Protecting one's website from Pie Register's CVE-2015-7377 vulnerability can be achieved through a few safety measures. Website owners can take the following precautions:

  • Regularly update their Pie Register plugin to the latest version
  • Implement a website firewall
  • Avoid exposing sensitive data to the public
  • Employ robust password policies
  • Deploy an advanced threat detection and remediation system 

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.