RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

Güvenlik açıkları

• CVE-2026-73341kimlik doğrulamasız≤ 6.0.9.7

  WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability

  Kritik 9.8

• CVE-2026-49764kimlik doğrulamasız≤ 6.0.8.6

  WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability

  Kritik 9.8

• CVE-2025-15403kimlik doğrulamasız≤ 6.0.7.1

  RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order

  Kritik 9.8

• CVE-2017-20208kimlik doğrulamasız→ 3.7.9.3

  RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection

  Kritik 9.8

• CVE-2024-10508kimlik doğrulamasız≤ 6.0.2.6

  RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

  Kritik 9.8

• CVE-2023-2499kimlik doğrulamasız≤ 5.2.1.0

  RegistrationMagic <= 5.2.1.0 - Authentication Bypass

  Kritik 9.8

• CVE-2024-25935giriş gerekir≤ 5.2.5.9

  WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability

  Kritik 9.8

• CVE-2026-12158kimlik doğrulamasız≤ 6.0.9.1

  RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter

  Yüksek 8.8

• CVE-2023-47645kimlik doğrulamasız · tıklama gerekir≤ 5.2.2.6

  WordPress RegistrationMagic Plugin <= 5.2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2023-25991kimlik doğrulamasız · tıklama gerekir≤ 5.1.9.2

  WordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)

  Yüksek 8.8

• CVE-2020-9454kimlik doğrulamasız · tıklama gerekir

  A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a

  Yüksek 8.8

• CVE-2024-1991abone+≤ 5.3.0.0

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation

  Yüksek 8.8

• CVE-2020-9458giriş gerekir

  In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privilege

  Yüksek 8.8

• CVE-2020-9457giriş gerekir

  The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vuln

  Yüksek 8.8

• CVE-2020-9456giriş gerekir

  In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privilege

  Yüksek 8.8

• CVE-2024-1990katılımcı+≤ 5.3.1.0

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode

  Yüksek 8.8

• CVE-2026-24373kimlik doğrulamasız≤ 6.0.7.1

  WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability

  Yüksek 8.1

• CVE-2021-4073kimlik doğrulamasız≤ 5.0.1.7

  RegistrationMagic <= 5.0.1.7 Authentication Bypass

  Yüksek 8.1

• CVE-2020-8435giriş gerekir

  An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress.

  Yüksek 8.1

• CVE-2026-32498kimlik doğrulamasız≤ <= 6.0.7.6

  WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2023-49831kimlik doğrulamasız≤ 5.2.3.0

  WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability

  Yüksek 7.5

• CVE-2023-51543kimlik doğrulamasız≤ 5.2.5.0

  WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability

  Yüksek 7.5

• CVE-2023-23976kimlik doğrulamasız≤ 5.1.9.2

  WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change

  Yüksek 7.5

• CVE-2026-82225kimlik doğrulamasız≤ 6.0.9.8

  WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

  Yüksek 7.4

• CVE-2025-11204yönetici≤ 6.0.6.2

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection

  Yüksek 7.2

• CVE-2023-50846yüksek yetki≤ 5.2.4.5

  WordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection

  Yüksek 7.2

• CVE-2023-2548yönetici≤ 5.2.0.5

  RegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change

  Yüksek 7.2

• CVE-2026-82221kimlik doğrulamasız · tıklama gerekir≤ 6.0.9.8

  WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2023-23989kimlik doğrulamasız≤ 5.1.9.2

  WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection

  Orta 6.5

• CVE-2025-2836abone+≤ 6.0.4.3

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

  Orta 6.4

• CVE-2025-13610katılımcı+≤ 6.0.6.7

  RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode

  Orta 6.4

• CVE-2025-24686kimlik doğrulamasız · tıklama gerekir≤ 6.0.3.3

  WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-43317kimlik doğrulamasız · tıklama gerekir≤ 6.0.1.0

  WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-39643kimlik doğrulamasız · tıklama gerekir≤ 6.0.0.1

  WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-33947kimlik doğrulamasız · tıklama gerekir≤ 5.3.2.0

  WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2024-29113kimlik doğrulamasız · tıklama gerekir≤ 5.2.5.9

  WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability

  Orta 6.1

• CVE-2023-51509kimlik doğrulamasız · tıklama gerekir≤ 5.2.4.1

  WordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2020-8436kimlik doğrulamasız · tıklama gerekir

  XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter.

  Orta 6.1

• CVE-2026-24374kimlik doğrulamasız · tıklama gerekir≤ 6.0.6.9

  WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 5.4

• CVE-2026-32385giriş gerekir≤ 6.0.7.6

  WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability

  Orta 5.4

• CVE-2025-14444kimlik doğrulamasız≤ 6.0.6.9

  RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_

  Orta 5.3

• CVE-2026-1054kimlik doğrulamasız≤ 6.0.7.4

  RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification

  Orta 5.3

• CVE-2023-51544kimlik doğrulamasız≤ 5.2.5.0

  WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability

  Orta 5.3

• CVE-2026-9242abone+≤ 6.0.8.6

  RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request

  Orta 5.3

• CVE-2024-2951kimlik doğrulamasız · tıklama gerekir≤ 5.3.0.0

  WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 4.3

• CVE-2020-9455giriş gerekir

  The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary ema

  Orta 4.3