← WordPress Vulnerabilities
WordPress security by component

RegistrationMagic

RegistrationMagic is a WordPress component with 11 published CVE records in this archive. The latest tracked vulnerability was published Feb 16, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: registrationmagic

CVE-2026-0929: RegistrationMagic: A security weakness

RegistrationMagic is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedFeb 16, 2026
Safe version guidanceSee mitigation notes
Safe version
Feb 16, 2026 CVE-2026-0929
RegistrationMagic: A security weakness
RegistrationMagic is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Feb 13, 2026 CVE-2025-15520
RegistrationMagic: A security weakness
RegistrationMagic is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE4.3
NVDPending
Oct 18, 2025 CVE-2017-20208
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login: Code execution
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
See mitigation notes
CVE9.8
NVDPending
May 15, 2025 CVE-2024-9390
RegistrationMagic: Cross-site scripting
RegistrationMagic is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE4.8
NVDPending
Jan 31, 2025 CVE-2025-24686
RegistrationMagic: Cross-site scripting
RegistrationMagic is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE7.1
NVD6.1
Dec 09, 2024 CVE-2023-49831
RegistrationMagic: A security weakness
RegistrationMagic is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE7.5
NVD7.5
Apr 09, 2024 CVE-2024-1990
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login: SQL injection
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login is affected by SQL injection. Exploitation requires at least contributor-level access. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE8.8
NVDPending
Mar 07, 2022 CVE-2022-0420
RegistrationMagic: SQL injection
RegistrationMagic is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.2
NVD7.2
Feb 01, 2022 CVE-2021-24648
RegistrationMagic: Cross-site scripting
RegistrationMagic is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
See mitigation notes
CVE6.1
NVD6.1
Jan 10, 2022 CVE-2021-24862
RegistrationMagic: SQL injection
RegistrationMagic is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE7.2
NVD7.2
Dec 14, 2021 CVE-2021-4073
RegistrationMagic: A security weakness
RegistrationMagic is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.
See mitigation notes
CVE9.8
NVD8.1