WPScan
How it worksPricing
Vulnerabilities
WordPressPluginsThemesStatsSubmit vulnerabilities
For developers
StatusAPI detailsCLI scanner
Contact

WordPress Plugin Vulnerabilities

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login

2023-02-17
RegistrationMagic < 5.1.9.3 - Form Deletion via CSRF
Fixed in version 5.1.9.3
2022-02-07
RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection
Fixed in version 5.0.2.2
2021-12-28
Registration Magic < 5.0.1.9 - Reflected Cross-Site Scripting
Fixed in version 5.0.1.9
2021-12-27
Registration Magic < 5.0.1.9 - Reflected Cross-Site Scripting
Fixed in version 5.0.1.9
2021-12-08
RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
Fixed in version 5.0.1.6
2021-12-08
Registration Magic < 5.0.1.8 - Authentication Bypass
Fixed in version 5.0.1.8
2020-03-05
RegistrationMagic – Custom Registration Forms and User Login < 4.6.0.4 - Multiple Critical Issues
Fixed in version 4.6.0.4
2020-01-30
Registration Magic < 4.6.0.3 - Multiple Cross-Site Scripting (XSS)
Fixed in version 4.6.0.3
2020-01-30
Registration Magic < 4.6.0.3 - Authenticated SQL Injection via Form_id
Fixed in version 4.6.0.3
2017-12-10
RegistrationMagic - Custom Registration Forms <= 3.8.0.4 - Authenticated SQL Injection
Fixed in version 3.8.0.9
2017-12-10
RegistrationMagic - Custom Registration Forms <= 3.8.0.4 - Authenticated Reflected XSS
Fixed in version 3.8.0.9
2017-10-02
RegistrationMagic-Custom Registration Forms <= 3.7.9.2 - Unauthenticated PHP Object Injection
Fixed in version 3.7.9.3