RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

Information

Software Type Plugin
Software Slug custom-registration-form-builder-with-submission-manager (view on wordpress.org)
Software Status Active
Software Author metagauss
Software Website www.registrationmagic.com
Software Downloads 2,137,926
Software Active Installs 7,000
Software Record Last Updated October 10, 2026

Showing 1-20 of 62 Vulnerabilities

Submit a Vulnerability
RegistrationMagic <= 6.0.9.8 - Authentication Bypass
9.8
CVE-2026-77826
Sep 3, 2026
Researcher: Mutantgun
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.9 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-77792
Sep 3, 2026
Researcher: Sai Praneeth Koti
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.8 - Unauthenticated Stored Cross-Site Scripting
7.2
CVE-2026-82221
Aug 31, 2026
Researcher: Gabriel Tanaka
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
5.3
CVE-2026-77794
Aug 31, 2026
Researcher: Vũ Quang Huy
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
5.3
CVE-2026-77793
Aug 31, 2026
Researcher: Charles Vosburgh
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.8 - Authentication Bypass
7.3
CVE-2026-82225
Aug 28, 2026
Researcher: emiliano carrizo
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Authenticated (Administrator+) SQL Injection
4.9
CVE-2026-77790
Aug 26, 2026
Researcher: Meher Sudhakar Abbireddi
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.7 - Unauthenticated PHP Object Injection
8.1
CVE-2026-73341
Aug 18, 2026
Researcher: dutafi
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Missing Authorization
5.3
CVE-2026-15257
Jul 30, 2026
Researcher: Jonatan Buskila
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Unauthenticated Insecure Direct Object Reference
5.3
CVE-2026-15255
Jul 30, 2026
Researcher: Jonatan Buskila
RegistrationMagic <= 6.0.9.4 - Unauthenticated Price Manipulation
5.3
CVE-2026-15208
Jul 20, 2026
Researcher: Pedro Pinho
RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter
8.8
CVE-2026-12158
Jun 30, 2026
Researchers: Chloe Chamberland, Wordfence PRISM
RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request
5.3
CVE-2026-9242
Jun 26, 2026
Researcher: Rafael Gunawan (kokon)
RegistrationMagic – User Registration Forms Plugin <= 6.0.8.6 - Missing Authorization
5.3
CVE-2026-49764
Jun 4, 2026
Researcher: James Paremain
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.6 - Missing Authorization
5.3
CVE-2026-32498
Mar 20, 2026
Researcher: Supakiad S. (m3ez)
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authentication Bypass
9.8
CVE-2026-24373
Mar 12, 2026
Researcher: 0xd4rk5id3
RegistrationMagic <= 6.0.7.6 - Missing Authorization
4.3
CVE-2026-32385
Feb 18, 2026
Researcher: Supakiad S. (m3ez)
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment
5.3
CVE-2025-14444
Feb 17, 2026
Researcher: Md. Moniruzzaman Prodhan (NomanProdhan)
RegistrationMagic < 6.0.7.2 - Missing Authorization
4.3
CVE-2026-0929
Feb 16, 2026
Researcher: Maktoum (bRpsd)
RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification
5.3
CVE-2026-1054
Jan 27, 2026
Researcher: Md. Moniruzzaman Prodhan (NomanProdhan)
Title Status CVE ID CVSS Researchers Date
RegistrationMagic <= 6.0.9.8 - Authentication Bypass Patched CVE-2026-77826 9.8 Mutantgun September 3, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.9 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-77792 7.2 Sai Praneeth Koti September 3, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.8 - Unauthenticated Stored Cross-Site Scripting Patched CVE-2026-82221 7.2 Gabriel Tanaka August 31, 2026
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass Patched CVE-2026-77794 5.3 Vũ Quang Huy August 31, 2026
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass Patched CVE-2026-77793 5.3 Charles Vosburgh August 31, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.8 - Authentication Bypass Patched CVE-2026-82225 7.3 emiliano carrizo August 28, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Authenticated (Administrator+) SQL Injection Patched CVE-2026-77790 4.9 Meher Sudhakar Abbireddi August 26, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.7 - Unauthenticated PHP Object Injection Patched CVE-2026-73341 8.1 dutafi August 18, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Missing Authorization Patched CVE-2026-15257 5.3 Jonatan Buskila July 30, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Unauthenticated Insecure Direct Object Reference Patched CVE-2026-15255 5.3 Jonatan Buskila July 30, 2026
RegistrationMagic <= 6.0.9.4 - Unauthenticated Price Manipulation Patched CVE-2026-15208 5.3 Pedro Pinho July 20, 2026
RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter Patched CVE-2026-12158 8.8 Chloe Chamberland, Wordfence PRISM June 30, 2026
RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request Patched CVE-2026-9242 5.3 Rafael Gunawan (kokon) June 26, 2026
RegistrationMagic – User Registration Forms Plugin <= 6.0.8.6 - Missing Authorization Patched CVE-2026-49764 5.3 James Paremain June 4, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.6 - Missing Authorization Patched CVE-2026-32498 5.3 Supakiad S. (m3ez) March 20, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authentication Bypass Patched CVE-2026-24373 9.8 0xd4rk5id3 March 12, 2026
RegistrationMagic <= 6.0.7.6 - Missing Authorization Patched CVE-2026-32385 4.3 Supakiad S. (m3ez) February 18, 2026
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment Patched CVE-2025-14444 5.3 Md. Moniruzzaman Prodhan (NomanProdhan) February 17, 2026
RegistrationMagic < 6.0.7.2 - Missing Authorization Patched CVE-2026-0929 4.3 Maktoum (bRpsd) February 16, 2026
RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification Patched CVE-2026-1054 5.3 Md. Moniruzzaman Prodhan (NomanProdhan) January 27, 2026

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation