Vulnerabilities / RegistrationMagic
RegistrationMagic vulnerabilities
Advisories WPSec published for RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login. Other sources may list more. Its attack surface: RegistrationMagic on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-15 | WPSEC-2026-0979 | RegistrationMagic <= 6.1.0.1 - Unauthenticated Payment Bypass via PayPal IPN Sandbox Verification | Medium 5.3 | 6.1.0.2 |
| 2026-10-02 | WPSEC-2026-0316 | RegistrationMagic <= 6.1.0.0 - Unauthenticated Reflected Cross-Site Scripting via 'total_price' and 'description' Parameters | Medium 6.1 | 6.1.0.1 |
License: CC BY 4.0