PatchTheCVEregistrationmagic vulnerabilities and fixes
Recent CVEs affecting registrationmagic, with upgrade or downgrade steps. 13 tracked.
registrationmagic has 13 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 13. Most recent: 2025-10-18. Highest priority: CVE-2024-10508 (score 58/100).
- CVE-2025-24686 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagaus
- CVE-2024-9390 MEDIUM 4.8 UPGRADE The RegistrationMagic WordPress plugin before 6.0.2.1 does not sanitise and escape some of its settings, whic
- CVE-2024-43317 MEDIUM 4.3 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in M
- CVE-2024-39643 MEDIUM 5.8 UPGRADE Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in R
- CVE-2024-33947 HIGH 7.1 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagaus
- CVE-2024-25935 MEDIUM 4.3 UPGRADE Missing Authorization vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from
- CVE-2024-1991 HIGH 8.8 UPGRADE The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordP
- CVE-2024-1990 HIGH 8.8 UPGRADE The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordP
- CVE-2024-10508 CRITICAL 9.8 UPGRADE The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulner
- CVE-2023-49831 HIGH 7.5 UPGRADE Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submi
- CVE-2023-23989 MEDIUM 5.3 UPGRADE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagaus
- CVE-2023-23976 HIGH 7.5 UPGRADE Incorrect Default Permissions vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not
- CVE-2017-20208 CRITICAL 9.8 UPGRADE The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordP
FAQ
How do I fix registrationmagic vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is registrationmagic being exploited right now?
None of the tracked registrationmagic CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which registrationmagic CVE should I patch first?
CVE-2024-10508 currently ranks highest (58/100): The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulner.