RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login vulnerabilities
8 known vulnerabilities in RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login from Metagauss. 8 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
RegistrationMagic – Custom Registration Forms…: Cross-Site Request Forgery
The RegistrationMagic – User Registration Forms Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.0.9.1. This is due to missing or incorrect nonce validation on the process_request function. This ma
- 9.8 Critical severity
RegistrationMagic – Custom Registration Forms…: Improper Privilege Management
The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.7.1. This is due to the 'add_menu' function is accessible via the 'rm_user_exists' AJAX action and allows arbitrary updates to the 'admin
- 7.2 High severity
RegistrationMagic – Custom Registration Forms…: Improper Neutralization of Special Elements used in an SQL Command
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.0.6.2 due to insufficient escaping on the user supplied parameter and lack
- 9.8 Critical severity
RegistrationMagic – Custom Registration Forms…: Improper Handling of Missing Values
The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating the
- 8.8 High severity
RegistrationMagic – Custom Registration Forms…: Missing Authorization
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the update_users_role() function in all versions up to, and including,
- 8.8 High severity
RegistrationMagic – Custom Registration Forms…: Improper Neutralization of Special Elements used in an SQL Command
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to blind SQL Injection via the ‘id’ parameter of the RM_Form shortcode in all versions up to, and including, 5.3.1.0 due to insuffi
- 7.2 High severity
RegistrationMagic – Custom Registration Forms…: Authorization Bypass Through User-Controlled Key
The RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 5.2.0.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access syste
- 9.8 Critical severity
RegistrationMagic – Custom Registration Forms…: Improper Authentication
The RegistrationMagic plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.2.1.0. This is due to insufficient verification on the user being supplied during a Google social login through the plugin. This makes it poss