Advisories · Technology

Metagauss RegistrationMagic.

Every CVE that names Metagauss RegistrationMagic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-82225 CVE record

CVSS 7.4 High

WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability
- Metagauss RegistrationMagic
- Authentication bypass
Not analysed yet 31 Aug 2026
CVE-2026-82221 CVE record

CVSS 7.1 High

WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability
- Metagauss RegistrationMagic
- Cross-site scripting (XSS)
Not analysed yet 31 Aug 2026
CVE-2026-73341 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability
- Metagauss RegistrationMagic
- Insecure deserialization
Not analysed yet 18 Aug 2026
CVE-2026-49764 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability
- Metagauss RegistrationMagic
- Authentication bypass
Not analysed yet 15 Jun 2026
CVE-2026-32498 CVE record

CVSS 7.5 High

WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability
- Metagauss RegistrationMagic
- Broken access control
Not analysed yet 25 Mar 2026
CVE-2026-24373 CVE record

CVSS 8.1 High

WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability
- Metagauss RegistrationMagic
- Privilege escalation
Not analysed yet 25 Mar 2026
CVE-2026-32385 CVE record

CVSS 5.4 Medium

WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability
- Metagauss RegistrationMagic
- Broken access control
Not analysed yet 13 Mar 2026
CVE-2026-24374 CVE record

CVSS 5.4 Medium

WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability
- Metagauss RegistrationMagic
- Cross-site request forgery (CSRF)
Not analysed yet 22 Jan 2026
CVE-2025-24686 CVE record

CVSS 7.1 High

WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability
- Metagauss RegistrationMagic
- Cross-site scripting (XSS)
Not analysed yet 31 Jan 2025
CVE-2023-49831 CVE record

CVSS 7.5 High

WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability
- Metagauss RegistrationMagic
- Broken access control
Not analysed yet 9 Dec 2024
CVE-2023-51544 CVE record

CVSS 5.3 Medium

WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability
- Metagauss RegistrationMagic
- CWE-799
Not analysed yet 4 Jun 2024
CVE-2023-51543 CVE record

CVSS 5.3 Medium

WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability
- Metagauss RegistrationMagic
- Authentication bypass
Not analysed yet 4 Jun 2024
CVE-2024-33947 CVE record

CVSS 7.1 High

WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability
- Metagauss RegistrationMagic
- Cross-site scripting (XSS)
Not analysed yet 3 May 2024
CVE-2023-23989 CVE record

CVSS 5.3 Medium

WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection
- Metagauss RegistrationMagic
- Cross-site scripting (XSS)
Not analysed yet 24 Apr 2024
CVE-2023-23976 CVE record

CVSS 7.5 High

WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change
- Metagauss RegistrationMagic
- Broken access control
Not analysed yet 24 Apr 2024
CVE-2024-2951 CVE record

CVSS 4.3 Medium

WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
- Metagauss RegistrationMagic
- Cross-site request forgery (CSRF)
Not analysed yet 26 Mar 2024
CVE-2024-25935 CVE record

CVSS 4.3 Medium

WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability
- Metagauss RegistrationMagic
- Broken access control
Not analysed yet 21 Mar 2024
CVE-2024-29113 CVE record

CVSS 7.1 High

WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability
- Metagauss RegistrationMagic
- Cross-site scripting (XSS)
Not analysed yet 19 Mar 2024