RegistrationMagic vulnerabilities
We track 4 vulnerabilities in RegistrationMagic products across 2 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2026.
Latest RegistrationMagic vulnerabilities
- 8.8 High severity
RegistrationMagic: Improper Authentication
The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was issued to before accepting it as proof of identity, allowing unauthenticated attackers to log in as an existing user whose token they can obtain
- 7.5 High severity
RegistrationMagic: Improper Neutralization of Input During Web Page Generation
The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against hig
- 7.2 High severity
RegistrationMagic – Custom Registration Forms…: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login.This issue affects RegistrationMagic – Custom Regi
- 8.8 High severity
RegistrationMagic – Custom Registration Forms…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, U