What’s Vulnerable › Products
Metagauss RegistrationMagic vulnerabilities
60 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 29 published in the last 12 months.
Check whether your Metagauss RegistrationMagic version is affected
Latest Metagauss RegistrationMagic vulnerabilities
- CVE-2026-77826 — RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation (CVSS 8.8)
- CVE-2026-77794 — RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity (CVSS 5.3)
- CVE-2026-77793 — RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field (CVSS 5.3)
- CVE-2026-77792 — RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field (CVSS 7.5)
- CVE-2026-82225 — WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability (CVSS 7.4)
- CVE-2026-82221 — WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
- CVE-2026-77790 — RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter (CVSS 5.5)
- CVE-2026-73341 — WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability (CVSS 9.8)
- CVE-2026-15208 — RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification (CVSS 5.3)
- CVE-2026-15257 — RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification (CVSS 5.3)
- CVE-2026-15255 — RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR (CVSS 5.3)
- CVE-2026-12158 — RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter (CVSS 8.8)
- CVE-2026-9242 — RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request (CVSS 5.3)
- CVE-2026-49764 — WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability (CVSS 9.8)
- CVE-2026-32498 — WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability (CVSS 7.5)
- CVE-2026-24373 — WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability (CVSS 8.1)
- CVE-2026-32385 — WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability (CVSS 5.4)
- CVE-2025-14444 — RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment (CVSS 5.3)
- CVE-2026-0929 — RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation (CVSS 4.3)
- CVE-2025-15520 — RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure (CVSS 4.3)
- CVE-2026-1054 — RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification (CVSS 5.3)
- CVE-2026-24374 — WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
- CVE-2025-15403 — RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order (CVSS 9.8)
- CVE-2025-13610 — RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode (CVSS 6.4)
- CVE-2017-20208 — RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection (CVSS 9.8)