CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

40 matches found

RedhatCVE•added 2026/03/26 5:2 p.m.•2 views

CVE-2026-32498

Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects RegistrationMagic: from n/a through = 6.0.7.6...

7.5CVSS5.8AI score0.00047EPSS

Exploits0References1

EUVD•added 2026/03/25 6:31 p.m.•1 views

EUVD-2026-15845

5.8AI score0.00047EPSS

Exploits0References2

NVD•added 2026/03/25 5:17 p.m.•1 views

CVE-2026-32498

7.5CVSS0.00047EPSS

Exploits0References1

Cvelist•added 2026/03/25 4:14 p.m.•19 views

CVE-2026-32498 WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability

7.5CVSS0.00047EPSS

Exploits0References1

CVE•added 2026/03/25 4:14 p.m.•3 views

CVE-2026-32498

CVE-2026-32498 is a Missing Authorization vulnerability in the RegistrationMagic plugin (RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login) affecting versions up to and including 6.0.7.6. The Wordfence report explicitly attributes the issue to broken access...

7.5CVSS5.8AI score0.00047EPSS

Exploits0References1

ATTACKERKB•added 2026/03/25 4:14 p.m.•1 views

CVE-2026-32498

5.8AI score0.00047EPSS

Exploits0References2

CVE•added 2026/03/25 4:14 p.m.•4 views

CVE-2026-24373

CVE-2026-24373: Affected software is Metagauss RegistrationMagic Custom Registration Forms, User Registration, Payment, and User Login (RegistrationMagic custom-registration-form-builder-with-submission-manager) version

8.1CVSS5.8AI score0.00021EPSS

Exploits0References1

Positive Technologies•added 2026/03/25 12:0 a.m.•2 views

PT-2026-27855

Name of the Vulnerable Software and Affected Versions Metagauss RegistrationMagic versions through 6.0.7.1 Description An incorrect privilege assignment exists in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager, allowing for privilege escalation. The issue...

8.1CVSS5.9AI score0.00021EPSS

Exploits0References3

EUVD•added 2026/03/13 9:31 p.m.•0 views

EUVD-2026-11891

5.8AI score0.00053EPSS

Exploits0References2

Vulnrichment•added 2026/03/13 11:42 a.m.•2 views

CVE-2026-32385 WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability

5.8AI score0.00053EPSS

Exploits0References1

Cvelist•added 2026/03/13 11:42 a.m.•21 views

CVE-2026-32385 WordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerability

5.4CVSS0.00053EPSS

Exploits0References1

RedhatCVE•added 2026/01/23 9:15 p.m.•2 views

CVE-2026-24374

Cross-Site Request Forgery CSRF vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Cross Site Request Forgery.This issue affects RegistrationMagic: from n/a through = 6.0.6.9...

5.4CVSS5.4AI score0.00029EPSS

Exploits0References1

NVD•added 2026/01/22 5:16 p.m.•3 views

CVE-2026-24374

5.4CVSS0.00029EPSS

Exploits0References1

Vulnrichment•added 2026/01/10 8:22 a.m.•1 views

CVE-2025-14976 User Registration & Membership <= 4.4.8 - Cross-Site Request Forgery to Arbitrary Post Deletion

The User Registration & Membership – Custom Registration Form Builder, Custom Login Form, User Profile, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.4.8. This is due to missing or incorrect nonce...

5.4CVSS5.1AI score0.00027EPSS

Exploits0References3

RedhatCVE•added 2025/11/07 5:33 p.m.•2 views

CVE-2025-60207

Unrestricted Upload of File with Dangerous Type vulnerability in Addify Custom User Registration Fields for WooCommerce user-registration-plugin-for-woocommerce allows Upload a Web Shell to a Web Server.This issue affects Custom User Registration Fields for WooCommerce: from n/a through = 2.1.2...

10CVSS6.9AI score0.00069EPSS

Exploits0References1

Vulnrichment•added 2025/11/06 3:55 p.m.•1 views

CVE-2025-60207 WordPress Custom User Registration Fields for WooCommerce plugin <= 2.1.2 - Arbitrary File Upload Vulnerability

10CVSS6.5AI score0.00069EPSS

Exploits0References1

CNNVD•added 2025/11/06 12:0 a.m.•1 views

WordPress plugin Custom User Registration Fields for WooCommerce 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host a personal blog site on a PHP and MySQL based...

10CVSS6.8AI score0.00069EPSS

Exploits0References1

RedhatCVE•added 2025/05/23 1:58 a.m.•7 views

CVE-2023-47645

Cross-Site Request Forgery CSRF vulnerability in RegistrationMagic RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login allows Cross Site Request Forgery.This issue affects RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User...

8.8CVSS8.5AI score0.00171EPSS

Exploits0References1

CVE•added 2025/05/06 7:24 a.m.•68 views

CVE-2025-3281

The CVE-2025-3281 entry concerns the WordPress plugin “User Registration & Membership – Custom Registration Form, Login Form, and User Profile.” The root cause is insecure direct object reference due to missing validation on the member_id key in the create_stripe_subscription() function, enabling...

5.3CVSS5.3AI score0.00191EPSS

Exploits0References3

OSV•added 2024/05/02 5:15 p.m.•27 views

CVE-2024-2417

The User Registration – Custom Registration Form, Login Form, and User Profile WordPress Plugin plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the formsaveaction function in all versions up to, and including, 3.1.5. This makes it possible for...

8.8CVSS6.8AI score

Exploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by