WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
custom-registration-form-builder-with-submission-manager
Published
2025-04-02
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.4.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Slug
custom-registration-form-builder-with-submission-manager
Published
2025-10-07
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.6.3 - Authenticated (Administrator+) SQL Injection
Slug
custom-registration-form-builder-with-submission-manager
Published
2025-12-15
Title
RegistrationMagic < 6.0.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-01-16
Title
RegistrationMagic < 6.0.7.2 - Unauthenticated Privilege Escalation via admin_order
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-01-23
Title
RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-01-26
Title
RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-01-27
Title
RegistrationMagic < 6.0.7.5 - Missing Authorization to Unauthenticated Arbitrary Settings Modification
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-01-10
Title
RegistrationMagic < 6.0.7.0 - Cross-Site Request Forgery
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-02-17
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.7.0 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-03-12
Title
RegistrationMagic < 6.0.7.2 - Authentication Bypass
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-03-20
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.7.7 - Missing Authorization
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-02-18
Title
RegistrationMagic < 6.0.7.7 - Missing Authorization
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-06-04
Title
RegistrationMagic – User Registration Forms Plugin < 6.0.8.7 - Missing Authorization
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-06-26
Title
RegistrationMagic < 6.0.8.7 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-06-30
Title
RegistrationMagic < 6.0.9.2 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-07-10
Title
RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission Disclosure via IDOR
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-07-10
Title
RegistrationMagic < 6.0.9.4 - Unauthenticated Form Submission and User Profile Modification
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-07-20
Title
RegistrationMagic < 6.0.9.5 - Unauthenticated Payment Bypass via Amount-Blind PayPal Verification
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-28
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.9 - Authentication Bypass
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-31
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.9 - Unauthenticated Stored Cross-Site Scripting
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-24
Title
RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-18
Title
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.8 - Unauthenticated PHP Object Injection
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-31
Title
RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-31
Title
RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field
Slug
custom-registration-form-builder-with-submission-manager
Published
2026-08-31
Title
RegistrationMagic 6.0.0.0 - 6.0.9.8 - Unauthenticated Payment Bypass via Zero Quantity