Input validation vulnerability in Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction 3.7.2.4

The Pie Register is a WordPress plugin for user registration forms, invitation-based registrations, and custom login pages. It has recently been discovered that versions up to 3.7.2.3 of this plugin are vulnerable to something called an Open Redirect. This happens when the plugin does not properly validate the redirect url that is supplied via the ‘redirect_to’ parameter. This makes it possible for unauthenticated attackers to redirect unsuspecting users to malicious websites if they can somehow get the user to perform an action.