CVE-2024-10508

تصعيد الامتيازات دون مصادقة عبر استعادة كلمة المرور على RegistrationMagic = 6.0.2.6 إخلاء مسؤولية : يتم توفير هذه المعلومات لأغراض تعليمية فقط. تهدف هذه الوثيقة إلى رفع الوعي حول الثغرات الأمنية ولا ينبغي استخدامها في أي أنشطة غير مصرح بها أو خبيثة. إن القيام بأفعال تستغل هذه الثغرات دون إذن هو أ...

CVE-2024-10508

CVE-2024-10508 Questo strumento esegue la scansione dei siti WordPress per individuare vulnerabilità nel plugin RegistrationMagic CVE-2024-10508. Verifica la presenza di una versione specifica 6.0.2.6 e contrassegna il sito come vulnerabile se la trova. I risultati vengono salvati in un file...

CVE-2026-77790

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...

CVE-2026-77790

CVE-2026-77790 affects the RegistrationMagic WordPress plugin in versions before 6.0.9.4 . The rm_sortby parameter is not sanitised or escaped before being used in a SQL statement, allowing high-privilege users (e.g., admin) to perform SQL injection attacks. The fix is to update the plugin to ver...

WordPress RegistrationMagic plugin < 6.0.9.4 - Admin+ SQLi vulnerability

Admin+ SQLi vulnerability discovered by Meher Sudhakar Abbireddi in WordPress Plugin RegistrationMagic versions 6.0.9.4...

EUVD-2026-66290

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...

RegistrationMagic <= 5.0.1.7 - Authentication Bypass

RegistrationMagic WordPress plugin versions = 5.0.1.7 contain an authentication bypass caused by missing identity validation in socialloginusingemail, letting unauthenticated users log in as any site user, exploit requires knowing a valid username. id: CVE-2021-4073 info: name: RegistrationMagic ...

RegistrationMagic <= 6.0.7.1 - Privilege Escalation

RegistrationMagic WordPress plugin = 6.0.7.1 contains a privilege escalation caused by improper access control in 'addmenu' via 'rmuserexists' AJAX action, letting unauthenticated attackers manipulate admin menu capabilities, exploit requires subscriber user for further escalation. id:...

WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection

WordPress RegistrationMagic plugin before 5.0.1.6 contains an authenticated SQL injection vulnerability. The plugin does not escape user input in its rmchronosajax AJAX action before using it in a SQL statement when duplicating tasks in batches. An attacker can possibly obtain sensitive...

CVE-2025-15403

CVE-2025-15403 RegistrationMagic 📡 खुफिया जानकारी सबसे पहले यहीं आती है। @KNxploited को टेलीग्राम पर फॉलो करें — सटीक CVE खुलासे, काम करने वाले एक्सप्लॉइट और गहन भेद्यता अनुसंधान। वह चैनल जो खबर का इंतज़ार नहीं करते — बल्कि वे खबर बनाते हैं। 🧠 अवलोकन CVE-2025-15403 WordPress के लिए...

CVE-2026-73341

Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...

CVE-2026-73341 WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability

Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...

CVE-2026-73341

The WordPress RegistrationMagic plugin (versions

CVE-2026-73341

Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...

EUVD-2026-60771

Unauthenticated PHP Object Injection in RegistrationMagic = 6.0.9.7 versions...

EUVD-2026-54197

The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency, payee, or prior use against the registration it is finalising: its server-side check only confirms the capture status is COMPLETED. An unauthenticated attacker can therefore...

CVE-2026-15208

The CVE pertains to the RegistrationMagic WordPress plugin prior to 6.0.9.5. The vulnerability arises because the server-side check only verifies that the PayPal capture status is COMPLETED, without validating the capture amount, currency, payee, or prior use against the target registration. This...

CVE-2026-15255

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data,...

CVE-2026-15257

The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a front-end submission-editing action, allowing unauthenticated attackers to overwrite other users' form submissions and the profile fields of the associated non-administrator...

EUVD-2026-51000

The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a front-end submission-editing action, allowing unauthenticated attackers to overwrite other users' form submissions and the profile fields of the associated non-administrator...