Skip to contentMetagauss Registrationmagic – Custom Registration Forms, User Registration, Payment, And User Login vulnerabilities
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' ParameterCVE-2026-121588.8 High
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN RequestCVE-2026-92425.3 Medium
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_paymentCVE-2025-144445.3 Medium
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings ModificationCVE-2026-10545.3 Medium
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_orderCVE-2025-15403Public exploit9.8 Critical
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' ShortcodeCVE-2025-136106.4 Medium
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreRegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object InjectionCVE-2017-202089.8 Critical
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL InjectionCVE-2025-112047.2 High
- metagauss registrationmagic – custom registration forms, user registration, payment, and user loginRegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2025-28366.4 Medium
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreRegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password RecoveryCVE-2024-10508Public exploit9.8 Critical
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreRegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege EscalationCVE-2024-19918.8 High
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreRegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via ShortcodeCVE-2024-19908.8 High
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreWordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)CVE-2023-515097.1 High
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login, registrationmagic – custom registration forms, user registration, payment, and user login +2 moreWordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL InjectionCVE-2023-508467.6 High
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login, registrationmagic – custom registration forms, user registration, payment, and user login +2 moreWordPress RegistrationMagic Plugin <= 5.2.2.6 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-476454.3 Medium
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreRegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password ChangeCVE-2023-25486.6 Medium
- metagauss registrationmagic, registrationmagic – custom registration forms, user registration, payment, and user login +1 moreRegistrationMagic <= 5.2.1.0 - Authentication BypassCVE-2023-24999.8 Critical