RE
Product
RegistrationMagic
11
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 9Low 0
Watch
Add RegistrationMagic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77826 | 8.8 | Sep 5 | RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation Affected: 5.0.1.8 before 6.0.9.9 |
| CVE-2026-77792 | 7.5 | Sep 2 | RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field Affected: before 6.0.9.9 |
| CVE-2026-77790 | 5.5 | Aug 26 | RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter Affected: before 6.0.9.4 |
| CVE-2026-77794 | 5.3 | Sep 2 | RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity Affected: 6.0.0.0 before 6.0.9.9 |
| CVE-2026-77793 | 5.3 | Sep 2 | RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field Affected: before 6.0.9.9 |
| CVE-2026-15208 | 5.3 | Aug 6 | RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification Affected: before 6.0.9.5 |
| CVE-2026-15257 | 5.3 | Jul 30 | RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification Affected: before 6.0.9.4 |
| CVE-2026-15255 | 5.3 | Jul 30 | RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR Affected: before 6.0.9.4 |
| CVE-2024-9390 | 4.8 | May 15 | RegistrationMagic < 6.0.2.1 - Stored XSS Affected: before 6.0.2.1 |
| CVE-2026-0929 | 4.3 | Feb 16 | RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation Affected: before 6.0.7.2 |
| CVE-2025-15520 | 4.3 | Feb 13 | RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure Affected: before 6.0.7.2 |
Showing 11