RegistrationMagic Vulnerabilities and Affected Products
Vulnerabilities associated with RegistrationMagic.
Products
Clear product- RegistrationMagic2 vulnerabilities
- RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2023-25991MEDIUM | WordPress RegistrationMagic Plugin <= 5.1.9.2 is vulnerable to Cross Site Request Forgery (CSRF)Cross-Site Request Forgery (CSRF) vulnerability in RegistrationMagic plugin <= 5.1.9.2 versions. CWE-352Mar 13, 2023 | CVSS5.4v3.1 | EPSS0.248% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2021-4073CRITICAL | RegistrationMagic <= 5.0.1.7 Authentication BypassThe RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7. | CVSS9.8v3.1 | EPSS7% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |