RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login Security & Risk Analysis

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment

RegistrationMagic < 6.0.7.2 - Missing Authorization

RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification

RegistrationMagic <= 6.0.7.1 - Privilege Escalation via admin_order

RegistrationMagic <= 6.0.6.9 - Cross-Site Request Forgery

RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.3.3 - Reflected Cross-Site Scripting

RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

RegistrationMagic <= 6.0.1.0 - Unauthenticated Stored Cross-Site Scripting

RegistrationMagic <= 6.0.0.1 - Unauthenticated Stored Cross-Site Scripting

RegistrationMagic <= 5.3.2.0 - Reflected Cross-Site Scripting

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode

RegistrationMagic <= 5.3.0.0 - Cross-Site Request Forgery

RegistrationMagic <= 5.2.5.9 - Reflected Cross-Site Scripting

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation

RegistrationMagic <= 5.2.5.9 - Cross-Site Request Forgery

RegistrationMagic <= 5.2.5.0 - IP Spoofing

RegistrationMagic <= 5.2.5.0 - Form Submission Limit Bypass

RegistrationMagic Plugin <= 5.2.4.5 - Authenticated(Administrator+) SQL Injection

RegistrationMagic <= 5.2.3.0 - Missing Authorization

RegistrationMagic <= 5.2.2.6 - Cross-Site Request Forgery

RegistrationMagic <= 5.2.4.1 - Reflected Cross-Site Scripting via section_id

RegistrationMagic <= 5.2.1.0 - Authentication Bypass

RegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change

RegistrationMagic <= 5.1.9.2 - Cross-Site Request Forgery leading to Form Metadata Deletion

RegistrationMagic <= 5.1.9.2 - Missing Authorization to Unauthenticated Content Injection

RegistrationMagic <= 5.1.9.2 - Improper Authorization to Price Change

RegistrationMagic <= 5.0.2.1 - SQL Injection

RegistrationMagic <= 5.0.1.5 - SQL Injection

Registration Magic <= 5.0.1.8 - Reflected Cross-Site Scripting

RegistrationMagic <= 5.0.1.7 - Authentication Bypass

RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Cross-Site Request Forgery to Settings Modification

RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Privilege Escalation

RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Settings and User Data Export

RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Email Injection

RegistrationMagic – Custom Registration Forms and User Login <= 4.6.0.3 - Authenticated Settings Import to Privilege Escalation

RegistrationMagic - Custom Registration Forms, User Registration and User Login Plugin <= 4.6.0.2 - SQL Injection

RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin <= 4.6.0.1 - Cross-Site Scripting

RegistrationMagic - Custom Registration Forms <= 3.7.9.4 - Reflected Cross-Site Scripting

RegistrationMagic - Custom Registration Forms <= 3.8.0.4 - SQL Injection

RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection