Really Simple Security logo

Log out
Get PRO

Latest

Weak configuration vulnerability in RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login 5.2.5.0

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 27, 2023

The RegistrationMagic plugin for WordPress has a flaw that can be taken advantage of by unauthenticated attackers. This flaw allows them to submit more form entries than the form submission limit allows. It is due to the fact that the plugin uses user-supplied HTTP headers as its primary method for retrieving IP addresses. This vulnerability is present in all versions up to, and including, 5.2.5.0.

Detected in:

Registration Forms by RegistrationMagic – Custom User Registration for WordPress fixed vulnerable versions:
RegistrationMagic – Custom Registration Forms, User Registration, Payment and User Login fixed vulnerable versions:
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login fixed vulnerable versions: >= * <= 5.2.5.0
RegistrationMagic – Custom User Registration Forms fixed vulnerable versions:
RegistrationMagic – Custom User Registration Forms Plugin fixed vulnerable versions:
RegistrationMagic – Custom User Registration Forms, Payment Forms, and User Login fixed vulnerable versions:
RegistrationMagic – User Registration Plugin with Custom Registration Forms fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.