9.8
Critique
CVE-2017-20208 The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is…
Description
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.7.9.3 (exclusive) via deserialization of untrusted input from the is_expired_by_date() function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to fetch a remote file and install it on the site.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login 3.7 | premières → < 3.7.9.3 | 3.7.9.3 |
Autres CVE de RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Les 15 CVE de RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login →
CVE-2026-12158
The RegistrationMagic – User Registration Forms Plugin plugin for WordPress is vulnerable to Cross-Site Request…
8.8
Élevée
CVE-2026-9242
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is…
5.3
Moyenne
CVE-2025-14444
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is…
5.3
Moyenne
CVE-2026-1054
The RegistrationMagic plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including,…
5.3
Moyenne