Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

RegistrationMagic — Vulnerabilities & Security Advisories 33

All 33 CVE vulnerabilities found in RegistrationMagic, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities for the vendor Product RegistrationMagic, classified under the weakness type of Improper Input Validation. It collects known security flaws affecting the product, covering advisories published over the last five years. Users can track the vendor's release of security fixes, understand common weakness classes like buffer overflows or authentication bypasses, and review the product's vulnerability history. The data supports risk assessment and patch prioritization for IT security teams managing web-based registration systems.

Vendor: RegistrationMagic

CVE ID Title CVSS Severity Published
CVE-2026-77826 RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation - - 2026-09-05
CVE-2026-77794 RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity 5.3 Medium 2026-09-02
CVE-2026-77793 RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field 5.3 Medium 2026-09-02
CVE-2026-77792 RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field - - 2026-09-02
CVE-2026-82225 WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability CWE-288 7.4 High 2026-08-31
CVE-2026-82221 WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-08-31
CVE-2026-77790 RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter - - 2026-08-26
CVE-2026-73341 WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability CWE-502 9.8 Critical 2026-08-18
CVE-2026-15208 RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification 5.3 Medium 2026-08-06
CVE-2026-15257 RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification - - 2026-07-30
CVE-2026-15255 RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR - - 2026-07-30
CVE-2026-49764 WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability CWE-288 9.8 Critical 2026-06-15
CVE-2026-32498 WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability CWE-862 7.5 High 2026-03-25
CVE-2026-24373 WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability CWE-266 8.1 High 2026-03-25
CVE-2026-32385 WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability CWE-862 5.4 Medium 2026-03-13
CVE-2026-0929 RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation 4.3AI Medium AI 2026-02-16
CVE-2025-15520 RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure 6.5AI Medium AI 2026-02-13
CVE-2026-24374 WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium 2026-01-22
CVE-2024-9390 RegistrationMagic < 6.0.2.1 - Stored XSS 4.8AI Medium AI 2025-05-15
CVE-2025-24686 WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2025-01-31
CVE-2023-49831 WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability CWE-862 7.5 High 2024-12-09
CVE-2024-43317 WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability CWE-79 4.3 Medium 2024-08-19
CVE-2024-39643 WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability CWE-79 5.8 Medium 2024-08-01
CVE-2023-51544 WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability CWE-799 5.3 Medium 2024-06-04
CVE-2023-51543 WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability CWE-290 5.3 Medium 2024-06-04
CVE-2024-33947 WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-05-03
CVE-2023-23989 WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection CWE-79 5.3 Medium 2024-04-24
CVE-2023-23976 WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change CWE-276 7.5 High 2024-04-24
CVE-2024-2951 WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2024-03-26
CVE-2024-25935 WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-03-21

All 33 known CVE vulnerabilities affecting RegistrationMagic with full Chinese analysis, references, and POCs where available.