RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

Уязвимости

• CVE-2026-73341без авторизации≤ 6.0.9.7

  WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability

  Критич. 9.8

• CVE-2026-49764без авторизации≤ 6.0.8.6

  WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability

  Критич. 9.8

• CVE-2025-15403без авторизации≤ 6.0.7.1

  RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order

  Критич. 9.8

• CVE-2017-20208без авторизации→ 3.7.9.3

  RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection

  Критич. 9.8

• CVE-2024-10508без авторизации≤ 6.0.2.6

  RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

  Критич. 9.8

• CVE-2023-2499без авторизации≤ 5.2.1.0

  RegistrationMagic <= 5.2.1.0 - Authentication Bypass

  Критич. 9.8

• CVE-2024-25935нужен вход≤ 5.2.5.9

  WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability

  Критич. 9.8

• CVE-2026-12158без авторизации≤ 6.0.9.1

  RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter

  Высокий 8.8

• CVE-2023-47645без авторизации · нужен клик≤ 5.2.2.6

  WordPress RegistrationMagic Plugin <= 5.2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2023-25991без авторизации · нужен клик≤ 5.1.9.2

  WordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Высокий 8.8

• CVE-2020-9454без авторизации · нужен клик

  A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a

  Высокий 8.8

• CVE-2024-1991подписчик+≤ 5.3.0.0

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation

  Высокий 8.8

• CVE-2020-9458нужен вход

  In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privilege

  Высокий 8.8

• CVE-2020-9457нужен вход

  The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vuln

  Высокий 8.8

• CVE-2020-9456нужен вход

  In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privilege

  Высокий 8.8

• CVE-2024-1990участник+≤ 5.3.1.0

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode

  Высокий 8.8

• CVE-2026-24373без авторизации≤ 6.0.7.1

  WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability

  Высокий 8.1

• CVE-2021-4073без авторизации≤ 5.0.1.7

  RegistrationMagic <= 5.0.1.7 Authentication Bypass

  Высокий 8.1

• CVE-2020-8435нужен вход

  An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress.

  Высокий 8.1

• CVE-2026-32498без авторизации≤ <= 6.0.7.6

  WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2023-49831без авторизации≤ 5.2.3.0

  WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability

  Высокий 7.5

• CVE-2023-51543без авторизации≤ 5.2.5.0

  WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability

  Высокий 7.5

• CVE-2023-23976без авторизации≤ 5.1.9.2

  WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change

  Высокий 7.5

• CVE-2026-82225без авторизации≤ 6.0.9.8

  WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

  Высокий 7.4

• CVE-2025-11204админ≤ 6.0.6.2

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection

  Высокий 7.2

• CVE-2023-50846высокие права≤ 5.2.4.5

  WordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection

  Высокий 7.2

• CVE-2023-2548админ≤ 5.2.0.5

  RegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change

  Высокий 7.2

• CVE-2026-82221без авторизации · нужен клик≤ 6.0.9.8

  WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

  Высокий 7.1

• CVE-2023-23989без авторизации≤ 5.1.9.2

  WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection

  Средний 6.5

• CVE-2025-2836подписчик+≤ 6.0.4.3

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Средний 6.4

• CVE-2025-13610участник+≤ 6.0.6.7

  RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode

  Средний 6.4

• CVE-2025-24686без авторизации · нужен клик≤ 6.0.3.3

  WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2024-43317без авторизации · нужен клик≤ 6.0.1.0

  WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2024-39643без авторизации · нужен клик≤ 6.0.0.1

  WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2024-33947без авторизации · нужен клик≤ 5.3.2.0

  WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2024-29113без авторизации · нужен клик≤ 5.2.5.9

  WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability

  Средний 6.1

• CVE-2023-51509без авторизации · нужен клик≤ 5.2.4.1

  WordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)

  Средний 6.1

• CVE-2020-8436без авторизации · нужен клик

  XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter.

  Средний 6.1

• CVE-2026-24374без авторизации · нужен клик≤ 6.0.6.9

  WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 5.4

• CVE-2026-32385нужен вход≤ 6.0.7.6

  WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability

  Средний 5.4

• CVE-2025-14444без авторизации≤ 6.0.6.9

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_

  Средний 5.3

• CVE-2026-1054без авторизации≤ 6.0.7.4

  RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification

  Средний 5.3

• CVE-2023-51544без авторизации≤ 5.2.5.0

  WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability

  Средний 5.3

• CVE-2026-9242подписчик+≤ 6.0.8.6

  RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request

  Средний 5.3

• CVE-2024-2951без авторизации · нужен клик≤ 5.3.0.0

  WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability

  Средний 4.3

• CVE-2020-9455нужен вход

  The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary ema

  Средний 4.3