WordPress Plugin Vulnerabilities

RegistrationMagic < 5.2.5.1 - Form Submission Limit Bypass

Description

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to form submission limit bypass in all versions up to, and including, 5.2.5.0 due to insufficient protection logic. This makes it possible for unauthenticated attackers to submit more form entries than the form submission limit allows.

Affects Plugins

Plugin icon
custom-registration-form-builder-with-submission-manager
Fixed in 5.2.5.1

References

CVE
CVE-2023-51544
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/86ebb3d1-5fd1-48cb-95b7-f82014323f01

Miscellaneous

Original Researcher
Kyle Sanchez
Verified
No
WPVDB ID
eedc84e1-c136-4495-870c-adeeb0ad022e

Timeline

Publicly Published
2023-12-27 (about 2 years ago)
Added
2024-01-04 (about 2 years ago)
Last Updated
2024-01-04 (about 2 years ago)

Other

Published
Title
Published
2026-02-17
Title
Passster < 4.2.24 - Password Protection Bypass
Published
2017-01-26
Title
WordPress 4.2.0-4.7.1 - Press This UI Available to Unauthorised Users
Published
2026-07-27
Title
Event Booking Manager for WooCommerce (Pro) < 5.0.3 - Unauthenticated Payment Bypass via Client-Controlled Ticket Price
Published
2019-09-18
Title
Social Metrics Tracker <= 1.6.8 - Unauthorised Data Export
Published
2015-01-22
Title
Pagelines Theme <= 1.4.5 - Privilege escalation