{"id":"CVE-2021-4073","aliases":["EUVD-2021-33966","GHSA-3858-cvv4-qvj7"],"status":"published","title":"RegistrationMagic \u003c= 5.0.1.7 Authentication Bypass","description":"The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.0684,"percentile":0.94074,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-287"],"published":"2021-12-14T15:50:15Z","modified":"2026-06-17T04:18:59Z","exploits":[{"source":"nuclei","id":"CVE-2021-4073","title":"RegistrationMagic \u003c= 5.0.1.7 - Authentication Bypass","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-4073.yaml"}],"products":[{"vendor":"metagauss","product":"registrationmagic"},{"vendor":"registrationmagic","product":"registrationmagic"}],"references":[{"url":"https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4073","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"]},{"url":"https://plugins.trac.wordpress.org/changeset/2635173/custom-registration-form-builder-with-submission-manager/trunk/services/class_rm_user_services.php","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory"]},{"url":"https://www.wordfence.com/blog/2021/12/authentication-bypass-vulnerability-patched-in-user-registration-plugin/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4073"},{"url":"https://github.com/advisories/GHSA-3858-cvv4-qvj7"}],"sources":{"cve":[{"id":"CVE-2021-4073","title":"RegistrationMagic \u003c= 5.0.1.7 Authentication Bypass","description":"The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.","status":"published","published":"2021-12-14T15:50:15.519Z","modified":"2025-02-14T17:48:49.176Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:33:08.045407Z"}],"euvd":[{"id":"EUVD-2021-33966","description":"The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.","status":"published","published":"2021-12-14T15:50:15Z","modified":"2025-02-14T17:48:49Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:30.344132Z"}],"ghsa":[{"id":"GHSA-3858-cvv4-qvj7","title":"The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as...","description":"The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.","status":"published","published":"2021-12-15T00:00:42Z","modified":"2023-02-01T05:06:47Z","cwes":["CWE-287"],"updated_at":"2026-11-02T14:50:25.046492Z"}],"nvd":[{"id":"CVE-2021-4073","description":"The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.","status":"published","published":"2021-12-14T16:15:09.833Z","modified":"2026-06-17T04:18:59.61Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-287"],"updated_at":"2026-11-02T14:07:02.189991Z"}]}}