Registrationmagic (Unknown) - vulnerabilities (CVEs)
11 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-05. Vendor: Unknown.
CVEs of Registrationmagic
- CVE-2026-77826 - CVSS 8.8 (high), 2026-09-05: The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of…
- CVE-2026-77794 - CVSS 5.3 (medium), 2026-09-02: The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid…
- CVE-2026-77793 - CVSS 5.3 (medium), 2026-09-02: The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration server-side, allowing unauthenticated users to…
- CVE-2026-77792 - CVSS 7.5 (high), 2026-09-02: The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an…
- CVE-2026-77790 - CVSS 5.5 (medium), 2026-08-26: The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high…
- CVE-2026-15208 - CVSS 5.3 (medium), 2026-08-06: The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, payee, or prior use against the…
- CVE-2026-15255 - CVSS 5.3 (medium), 2026-07-30: The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being…
- CVE-2026-15257 - CVSS 5.3 (medium), 2026-07-30: The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a front-end submission-editing action,…
- CVE-2026-0929 - CVSS 4.3 (medium), 2026-02-16: The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site.
- CVE-2025-15520 - CVSS 4.3 (medium), 2026-02-13: The RegistrationMagic WordPress plugin before 6.0.7.2 checks nonces but not capabilities, allowing for the disclosure of some sensitive data to subscribers…
- CVE-2024-9390 - CVSS 4.8 (medium), 2025-05-15: The RegistrationMagic WordPress plugin before 6.0.2.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
