| CVE-2026-77826 |
The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was…
|
8.8
High
|
Sep 5, 2026 |
| CVE-2026-77794 |
The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2026-77793 |
The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration…
|
5.3
Medium
|
Sep 2, 2026 |
| CVE-2026-77792 |
The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting…
|
7.5
High
|
Sep 2, 2026 |
| CVE-2026-77790 |
The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL…
|
5.5
Medium
|
Aug 26, 2026 |
| CVE-2026-15208 |
The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare the verified PayPal capture's amount, currency,…
|
5.3
Medium
|
Aug 6, 2026 |
| CVE-2026-15257 |
The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a…
|
5.3
Medium
|
Jul 30, 2026 |
| CVE-2026-15255 |
The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented…
|
5.3
Medium
|
Jul 30, 2026 |
| CVE-2026-0929 |
The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers…
|
4.3
Medium
|
Feb 16, 2026 |
| CVE-2025-15520 |
The RegistrationMagic WordPress plugin before 6.0.7.2 checks nonces but not capabilities, allowing for the disclosure…
|
4.3
Medium
|
Feb 13, 2026 |
| CVE-2024-9390 |
The RegistrationMagic WordPress plugin before 6.0.2.1 does not sanitise and escape some of its settings, which could…
|
4.8
Medium
|
May 15, 2025 |