Skip to content
Metagauss Registrationmagic vulnerabilities
-
metagauss registrationmagic
RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
CVE-2026-77826
8.8 High
-
metagauss registrationmagic
RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity
CVE-2026-77794
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field
CVE-2026-77793
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field
CVE-2026-77792
7.5 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability
CVE-2026-82225
7.4 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-82221
Public exploit
7.1 High
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
CVE-2026-77790
5.5 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability
CVE-2026-73341
9.8 Critical
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification
CVE-2026-15208
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification
CVE-2026-15257
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR
CVE-2026-15255
5.3 Medium
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter
CVE-2026-12158
8.8 High
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request
CVE-2026-9242
5.3 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability
CVE-2026-49764
9.8 Critical
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability
CVE-2026-32498
7.5 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability
CVE-2026-24373
8.1 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability
CVE-2026-32385
5.4 Medium
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment
CVE-2025-14444
5.3 Medium
-
metagauss registrationmagic
RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation
CVE-2026-0929
4.3 Medium
-
metagauss registrationmagic
RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure
CVE-2025-15520
4.3 Medium
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification
CVE-2026-1054
5.3 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-24374
5.4 Medium
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order
CVE-2025-15403
Public exploit
9.8 Critical
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode
CVE-2025-13610
6.4 Medium
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 more
RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection
CVE-2017-20208
9.8 Critical
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection
CVE-2025-11204
7.2 High
-
metagauss registrationmagic
RegistrationMagic < 6.0.2.1 - Stored XSS
CVE-2024-9390
4.8 Medium
-
metagauss registrationmagic – custom registration forms, user registration, payment, and user login
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
CVE-2025-2836
6.4 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-24686
7.1 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability
CVE-2023-49831
7.5 High
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 more
RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery
CVE-2024-10508
Public exploit
9.8 Critical
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-43317
4.3 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability
CVE-2024-39643
5.8 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability
CVE-2023-51544
5.3 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability
CVE-2023-51543
5.3 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability
CVE-2024-33947
7.1 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection
CVE-2023-23989
5.3 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change
CVE-2023-23976
7.5 High
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 more
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation
CVE-2024-1991
8.8 High
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 more
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode
CVE-2024-1990
8.8 High
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2024-2951
4.3 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability
CVE-2024-25935
4.3 Medium
-
metagauss registrationmagic
WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-29113
7.1 High
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 more
WordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-51509
7.1 High
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login, registrationmagic – custom registration forms, user registration, payment, and user login +2 more
WordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection
CVE-2023-50846
7.6 High
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login, registrationmagic – custom registration forms, user registration, payment, and user login +2 more
WordPress RegistrationMagic Plugin <= 5.2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-47645
4.3 Medium
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 more
RegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change
CVE-2023-2548
6.6 Medium
-
metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 more
RegistrationMagic <= 5.2.1.0 - Authentication Bypass
CVE-2023-2499
9.8 Critical
-
metagauss registrationmagic
WordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)
CVE-2023-25991
5.4 Medium
-
metagauss registrationmagic, unknown registrationmagic – custom registration forms, user registration and user login plugin +1 more
RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection
CVE-2022-0420
7.2 High
- Show olderLoading…