RegistrationMagic – User Registration Forms Plugin

Vulnerabilities 59Slug custom-registration-form-builder-with-submission-managerLatest version 6.0.8.6WordPress.org →

Minimum safe version

6.0.7.7

Update to 6.0.7.7 or later to address 59 fixable vulnerabilities

Latest available6.0.8.6 ✓
N/A
2026-01-27< 6.0.7.5

RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification

WordfenceCVE
Medium 4.3
2026-02-16< 6.0.7.2

RegistrationMagic < 6.0.7.2 - Missing Authorization

EUVDWordfenceCVE
Medium 5.4
2026-03-13< 6.0.7.7

CVE-2026-32385

CVEWordfence
Medium 5.3
2026-02-18< 6.0.7.0

CVE-2025-14444

CVEWordfence
Medium 4.3
2026-02-13< 6.0.7.2

CVE-2025-15520

CVEWordfence
Medium 6.4
2025-12-15< 6.0.6.8

CVE-2025-13610

CVEWordfence
Critical 9.8
2025-10-18< 3.7.9.3

CVE-2017-20208

CVEEUVD
Medium 4.8
2025-05-15< 6.0.2.1

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Medium 6.4
2025-04-04< 6.0.4.4

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting

EUVDWordfenceCVE
Critical 9.8
2024-11-26< 6.0.2.7

WordPress RegistrationMagic Plugin <= 6.0.2.6 is vulnerable to Privilege Escalation

PatchstackCVEWordfence
N/A
2024-02-20< 5.2.6.0

RegistrationMagic <= 5.2.5.9 - Cross-Site Request Forgery

Wordfence
High 7.1
2024-12-27< 5.2.4.2

WordPress RegistrationMagic Plugin <= 5.2.4.1 is vulnerable to Cross Site Scripting (XSS)

PatchstackCVEWPScan
Medium 5.3
2024-12-27< 5.2.5.1

WordPress RegistrationMagic Plugin <= 5.2.5.0 is vulnerable to Bypass Vulnerability

PatchstackCVEWordfence
Medium 5.3
2024-12-27< 5.2.5.1

WordPress RegistrationMagic Plugin <= 5.2.5.0 is vulnerable to Bypass Vulnerability

PatchstackCVEWordfenceWPScan
N/A
2023-10-07< 5.2.4.2

RegistrationMagic <= 5.2.4.1 - Reflected Cross-Site Scripting via section_id

Wordfence
N/A
2017-10-02< 3.7.9.3

RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection

Wordfence
N/A
2017-12-10< 3.8.0.9

RegistrationMagic - Custom Registration Forms <= 3.8.0.4 - SQL Injection

Wordfence
N/A
2017-12-10< 3.8.0.9

RegistrationMagic - Custom Registration Forms <= 3.7.9.4 - Reflected Cross-Site Scripting

Wordfence
N/A
< 3.7.9.3

wpscan.com

WPScan
N/A
< 3.8.0.9

RegistrationMagic - Custom Registration Forms &lt;= 3.8.0.4 - Authenticated SQL Injection

WPScan
N/A
< 3.8.0.9

RegistrationMagic - Custom Registration Forms &lt;= 3.8.0.4 - Authenticated Reflected XSS

WPScan
N/A
< 5.0.1.9

Registration Magic &lt; 5.0.1.9 - Reflected Cross-Site Scripting

WPScan
N/A
2017-10-03< 3.7.9.3

WordPress RegistrationMagic-Custom Registration Forms plugin <= 3.7.9.2 - Unauthenticated PHP Object Injection vulnerability

Patchstack
N/A
2020-01-30< 4.6.0.3

WordPress RegistrationMagic plugin <= 4.6.0.1 - Authenticated SQL Injection (SQLi) vulnerability

Patchstack
N/A
2020-03-05< 4.6.0.4

WordPress RegistrationMagic plugin <= 4.6.0.3 - Multiple Critical vulnerabilities

Patchstack
N/A
2021-12-27< 5.0.1.9

WordPress RegistrationMagic plugin <= 5.0.1.8 - Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack