RE
Product
RegistrationMagic
42
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 21Medium 15Low 0
Watch
Add RegistrationMagic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73341 | 9.8 | Aug 18 | WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability Affected: through 6.0.9.7 |
| CVE-2026-49764 | 9.8 | Jun 15 | WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability Affected: through 6.0.8.6 |
| CVE-2017-20208 | 9.8 | Oct 18 | RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection Affected: before 3.7.9.3 |
| CVE-2024-10508 | 9.8 | Nov 9 | RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery Affected: before 6.0.2.7 |
| CVE-2024-25935 | 9.8 | Mar 21 | WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability Affected: through 5.2.5.9 |
| CVE-2023-2499 | 9.8 | May 16 | RegistrationMagic <= 5.2.1.0 - Authentication Bypass Affected: through 5.2.1.0 |
| CVE-2024-1991 | 8.8 | Apr 9 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation Affected: before 5.3.1.0 |
| CVE-2024-1990 | 8.8 | Apr 9 | RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode Affected: before 5.3.2.0 |
| CVE-2023-47645 | 8.8 | Nov 30 | WordPress RegistrationMagic Plugin <= 5.2.2.6 is vulnerable to Cross Site Request Forgery (CSRF) Affected: before 5.2.3.0 |
| CVE-2023-25991 | 8.8 | Mar 13 | WordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF) Affected: before 5.1.9.3 |
| CVE-2020-9458 | 8.8 | Mar 6 | In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privileges) to export submitted form data and… Affected: through 4.6.0.3 |
| CVE-2020-9457 | 8.8 | Mar 6 | The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and change form settings… Affected: through 4.6.0.3 |
| CVE-2020-9456 | 8.8 | Mar 6 | In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to… Affected: through 4.6.0.3 |
| CVE-2020-9454 | 8.8 | Mar 6 | A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all… Affected: through 4.6.0.3 |
| CVE-2026-24373 | 8.1 | Mar 25 | WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability Affected: through 6.0.7.1 |
| CVE-2021-4073 | 8.1 | Dec 14 | The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site… Affected: through 5.0.1.7 |
| CVE-2020-8435 | 8.1 | Mar 12 | An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress Affected: 4.6.0.0 |
| CVE-2026-32498 | 7.5 | Mar 25 | WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability Affected: through <= 6.0.7.6 |
| CVE-2023-49831 | 7.5 | Dec 9 | WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability Affected: through 5.2.3.0 |
| CVE-2023-51543 | 7.5 | Jun 4 | WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability Affected: through 5.2.5.0 |
| CVE-2023-23976 | 7.5 | Apr 24 | WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change Affected: through 5.1.9.2 |
| CVE-2026-82225 | 7.4 | Aug 31 | WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability Affected: through 6.0.9.8 |
| CVE-2023-50846 | 7.2 | Dec 28 | WordPress RegistrationMagic Plugin <= 5.2.4.5 is vulnerable to SQL Injection Affected: through 5.2.4.5 |
| CVE-2023-2548 | 7.2 | May 16 | RegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change Affected: through 5.2.0.5 |
| CVE-2022-0420 | 7.2 | Mar 7 | RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection Affected: before 5.0.2.2 |
| CVE-2021-24862 | 7.2 | Jan 10 | The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in… Affected: before 5.0.1.6 |
| CVE-2026-82221 | 7.1 | Aug 31 | WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability Affected: through 6.0.9.8 |
| CVE-2023-23989 | 6.5 | Apr 24 | WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection Affected: through 5.1.9.2 |
| CVE-2025-24686 | 6.1 | Jan 31 | WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 6.0.3.3 |
| CVE-2024-43317 | 6.1 | Aug 19 | WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability Affected: before 6.0.1.1 |
| CVE-2024-39643 | 6.1 | Aug 1 | WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability Affected: before 6.0.0.2 |
| CVE-2024-33947 | 6.1 | May 3 | WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability Affected: through 5.3.2.0 |
| CVE-2024-29113 | 6.1 | Mar 19 | WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 5.2.5.9 |
| CVE-2023-51509 | 6.1 | Feb 1 | WordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS) Affected: through 5.2.4.1 |
| CVE-2021-24648 | 6.1 | Feb 1 | Registration Magic < 5.0.1.9 - Reflected Cross-Site Scripting Affected: before 5.0.1.9 |
| CVE-2020-8436 | 6.1 | Mar 12 | XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name parameter Affected: 4.6.0.0 |
| CVE-2026-32385 | 5.4 | Mar 13 | WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability Affected: through 6.0.7.6 |
| CVE-2026-24374 | 5.4 | Jan 22 | WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 6.0.6.9 |
| CVE-2023-51544 | 5.3 | Jun 4 | WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability Affected: through 5.2.5.0 |
| CVE-2024-9390 | 4.8 | May 15 | RegistrationMagic < 6.0.2.1 - Stored XSS Affected: before 6.0.2.1 |
| CVE-2024-2951 | 4.3 | Mar 26 | WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 5.3.0.0 |
| CVE-2020-9455 | 4.3 | Mar 6 | The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of the site via… Affected: through 4.6.0.3 |
Showing 42