Advisories · Technology

RegistrationMagic.

Every CVE that names RegistrationMagic among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-77826 CVE record

CVSS 8.8 High

RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
- RegistrationMagic
- Authentication bypass
Not analysed yet 5 Sept 2026
CVE-2026-77794 CVE record

CVSS 5.3 Medium

RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity
- RegistrationMagic
- CWE-472
Not analysed yet 2 Sept 2026
CVE-2026-77793 CVE record

CVSS 5.3 Medium

RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field
- RegistrationMagic
- CWE-602
Not analysed yet 2 Sept 2026
CVE-2026-77792 CVE record

CVSS 7.5 High

RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field
- RegistrationMagic
- Cross-site scripting (XSS)
Not analysed yet 2 Sept 2026
CVE-2026-77790 CVE record

CVSS 5.5 Medium

RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
- RegistrationMagic
- SQL injection
Not analysed yet 26 Aug 2026
CVE-2026-15208 CVE record

CVSS 5.3 Medium

RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification
- RegistrationMagic
- CWE-345
Not analysed yet 6 Aug 2026
CVE-2026-15257 CVE record

CVSS 5.3 Medium

RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification
- RegistrationMagic
- Broken access control
Not analysed yet 30 Jul 2026
CVE-2026-15255 CVE record

CVSS 5.3 Medium

RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR
- RegistrationMagic
- Broken access control
Not analysed yet 30 Jul 2026
CVE-2026-0929 CVE record

CVSS 4.3 Medium

RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation
- RegistrationMagic
- Broken access control
Not analysed yet 16 Feb 2026
CVE-2025-15520 CVE record

CVSS 4.3 Medium

RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure
- RegistrationMagic
Not analysed yet 13 Feb 2026
CVE-2024-9390 CVE record

CVSS 4.8 Medium

RegistrationMagic < 6.0.2.1 - Stored XSS
- RegistrationMagic
Not analysed yet 15 May 2025
CVE-2024-39643 CVE record

CVSS 5.8 Medium

WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability
- RegistrationMagic
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2024
CVE-2023-25991 CVE record

CVSS 5.4 Medium

WordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)
- RegistrationMagic
- Cross-site request forgery (CSRF)
Not analysed yet 13 Mar 2023
CVE-2021-4073 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

RegistrationMagic <= 5.0.1.7 Authentication Bypass
- RegistrationMagic
- Authentication bypass
Not analysed yet 14 Dec 2021