CVE-2026-82221

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82225

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

EUVD-2026-68795

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82225 WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82225 WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82225

RegistrationMagic (Custom Registration Form Builder with Submission Manager) WordPress plugin versions ≤ 6.0.9.8 are affected by an unauthenticated Broken Authentication vulnerability, discovered by Emiliano Carrizo. The CVSS v3.1 score is 7.4 (HIGH) with a network attack vector, high complexity,...

CVE-2026-82221 WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

EUVD-2026-68793

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82221

CVE-2026-82221 affects the RegistrationMagic WordPress plugin (a custom registration form builder with submission manager) in versions ≤ 6.0.9.8 . The vulnerability is an unauthenticated Cross Site Scripting (XSS) , rated CVSS 3.1: 7.1 (HIGH) with a vector of AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L, ...

CVE-2026-82221 WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Gabriel Tanaka in WordPress Plugin RegistrationMagic versions = 6.0.9.8...

PT-2026-84024

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82221: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in RegistrationMagic = 6.0.9.8 versions...

PT-2026-84026

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

CVE-2026-82225: Authentication Bypass Using an Alternate Path or Channel

Unauthenticated Broken Authentication in RegistrationMagic = 6.0.9.8 versions...

WordPress RegistrationMagic plugin <= 6.0.9.8 - Broken Authentication vulnerability

Broken Authentication vulnerability discovered by Emiliano Carrizo in WordPress Plugin RegistrationMagic versions = 6.0.9.8...

CVE-2026-77790

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...

CVE-2026-77790

The RegistrationMagic WordPress plugin (versions before 6.0.9.4 ) is vulnerable to SQL injection due to the insufficient sanitization and escaping of the rm_sortby parameter within a SQL statement. This flaw allows high-privilege users, such as administrators , to execute unauthorized SQL command...

EUVD-2026-66290

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...

WordPress RegistrationMagic plugin < 6.0.9.4 - Admin+ SQLi vulnerability

Admin+ SQLi vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin RegistrationMagic versions 6.0.9.4...