Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

RegistrationMagic — Vulnerabilities & Security Advisories 26

All 26 CVE vulnerabilities found in RegistrationMagic, with AI-generated Chinese analysis, references, and POCs.

This page catalogs known security weaknesses associated with the RegistrationMagic plugin. It focuses specifically on vulnerabilities found within this WordPress user registration and membership management tool, categorized by their respective weakness types and tags. The collection includes a comprehensive range of security issues affecting the product, such as Cross-Site Scripting (XSS), SQL Injection, and improper access control flaws that have been publicly documented or disclosed to the vendor. The data spans from the early releases of the plugin through its most recent versions, covering a period where multiple security advisories were issued. By aggregating these findings, the page allows security researchers and site administrators to track the vendor’s history of issuing patches and understanding how specific weakness classes have impacted the product over time. Users can discover patterns in the types of vulnerabilities exploited, assess the severity and impact of past incidents, and review the product's vulnerability history to make informed decisions about plugin security and update schedules. This resource serves as a neutral reference for understanding the security posture of RegistrationMagic without bias or promotional content. It is designed to help developers and IT professionals quickly locate relevant information regarding known defects, facilitating better risk management and remediation strategies for websites relying on this software.

Vendor: RegistrationMagic

CVE ID Title CVSS Severity Published
CVE-2026-73341 WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability CWE-502 9.8 Critical 2026-08-18
CVE-2026-15208 RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification 5.3 Medium 2026-08-06
CVE-2026-15257 RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification - - 2026-07-30
CVE-2026-15255 RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR - - 2026-07-30
CVE-2026-49764 WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability CWE-288 9.8 Critical 2026-06-15
CVE-2026-32498 WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability CWE-862 7.5 High 2026-03-25
CVE-2026-24373 WordPress RegistrationMagic plugin <= 6.0.7.1 - Account Takeover vulnerability CWE-266 8.1 High 2026-03-25
CVE-2026-32385 WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability CWE-862 5.4 Medium 2026-03-13
CVE-2026-0929 RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation 4.3AI Medium AI 2026-02-16
CVE-2025-15520 RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure 6.5AI Medium AI 2026-02-13
CVE-2026-24374 WordPress RegistrationMagic plugin <= 6.0.6.9 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium 2026-01-22
CVE-2024-9390 RegistrationMagic < 6.0.2.1 - Stored XSS 4.8AI Medium AI 2025-05-15
CVE-2025-24686 WordPress RegistrationMagic Plugin <= 6.0.3.3 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2025-01-31
CVE-2023-49831 WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability CWE-862 7.5 High 2024-12-09
CVE-2024-43317 WordPress RegistrationMagic plugin <= 6.0.1.0 - Cross Site Scripting (XSS) vulnerability CWE-79 4.3 Medium 2024-08-19
CVE-2024-39643 WordPress RegistrationMagic plugin <= 6.0.0.1 - Cross Site Scripting (XSS) vulnerability CWE-79 5.8 Medium 2024-08-01
CVE-2023-51544 WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability CWE-799 5.3 Medium 2024-06-04
CVE-2023-51543 WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability CWE-290 5.3 Medium 2024-06-04
CVE-2024-33947 WordPress RegistrationMagic plugin <= 5.3.2.0 - Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-05-03
CVE-2023-23989 WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection CWE-79 5.3 Medium 2024-04-24
CVE-2023-23976 WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change CWE-276 7.5 High 2024-04-24
CVE-2024-2951 WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 4.3 Medium 2024-03-26
CVE-2024-25935 WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability CWE-862 4.3 Medium 2024-03-21
CVE-2024-29113 WordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2024-03-19
CVE-2023-25991 WordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF) CWE-352 5.4 Medium 2023-03-13
CVE-2021-4073 RegistrationMagic <= 5.0.1.7 Authentication Bypass CWE-287 9.8 Critical 2021-12-14

All 26 known CVE vulnerabilities affecting RegistrationMagic with full Chinese analysis, references, and POCs where available.