CVE-2021-4073

CRITICALNuclei

RegistrationMagic <= 5.0.1.7 Authentication Bypass

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-4073 has a selected CVSS score of 9.8 (critical); EIP currently links 1 Nuclei template.

Description

The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Dec 8, 2021 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationNone
AutomatableYes
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Feb 14, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

RegistrationMagic

Browse RegistrationMagic / RegistrationMagic
CVE List5.0.1.7 to ≤ 5.0.1.7affected

registrationmagic

Browse metagauss / registrationmagic
VulnCheckVersion data not supplied

Nuclei templates

1
ProjectDiscoveryCRITICALRegistrationMagic <= 5.0.1.7 - Authentication BypassCVSS 9.8

RegistrationMagic WordPress plugin versions <= 5.0.1.7 contain an authentication bypass caused by missing identity validation in social_login_using_email(), letting unauthenticated users log in as any site user, exploit requires knowing a valid username.

Impact

Unauthenticated attackers can log in as any user, including administrators, potentially leading to full site compromise.

Remediation

Update to the latest version of the plugin where the issue is fixed.

WeaknessesCWE-287
Authorsdaffainfo
Template tagscvecve2021wordpresswpwp-pluginmetagaussregistrationmagicauth-bypassvkev
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:metagauss:registrationmagic:*:*:*:*:*:wordpress:*:*
https://www.wordfence.com/blog/2021/12/authentication-bypass-vulnerability-patched-in-user-registration-plugin/ https://nvd.nist.gov/vuln/detail/CVE-2021-4073 https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4073

Source: ProjectDiscovery

References

4