Affected: genetechproducts Pie Register – User Registration, Profiles & Content Restriction, genetech_products registration_forms, genetech_products user_registration_forms, genetech_products front_end_user_profile_login_form, genetech_products invitation_based_registrations, genetech_products content_registration

The Registration Forms – User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the pieregister_install_addon function in all versions up to, and including, 3.8.3.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to install arbitrary plugins. As a result attackers might achieve code execution on the targeted server