RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authentication Bypass
2026-03-12 00:00
0xd4rk5id3Strategic Overview
StatusPatched in 6.0.7.2
Affected PluginRegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login
Affected Version
<= 6.0.7.1CVSS9.8Critical
CVE
CVE-2026-24373Vulnerability Overview
The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.7.1. This makes it possible for unauthenticated attackers to bypass authentication.
Technical Analysis
REMEDIATION: Update to version 6.0.7.2, or a newer patched version --- IDENTIFIER: CWE-287 (Improper Authentication) When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C