High
CVE-2025-11204
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 62
Reset filters
Medium
CVE-2025-2836
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.4.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-9390
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2025-24686
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.3.3 - Reflected Cross-Site Scripting
Critical
CVE-2024-10508
RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery
High
CVE-2024-43317
RegistrationMagic <= 6.0.1.0 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-39643
RegistrationMagic <= 6.0.0.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-33947
RegistrationMagic <= 5.3.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-2951
RegistrationMagic <= 5.3.0.0 - Cross-Site Request Forgery
High
CVE-2024-1990
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.1.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2024-29113
RegistrationMagic <= 5.2.5.9 - Reflected Cross-Site Scripting
High
CVE-2024-1991
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 5.3.0.0 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-25935
RegistrationMagic <= 5.2.5.9 - Cross-Site Request Forgery
Medium
CVE-2023-51544
RegistrationMagic <= 5.2.5.0 - Form Submission Limit Bypass
Medium
CVE-2023-51543
RegistrationMagic <= 5.2.5.0 - IP Spoofing
Medium
CVE-2023-50846
RegistrationMagic Plugin <= 5.2.4.5 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-49831
RegistrationMagic <= 5.2.3.0 - Missing Authorization
Medium
CVE-2023-47645
RegistrationMagic <= 5.2.2.6 - Cross-Site Request Forgery
Medium
CVE-2023-51509
RegistrationMagic <= 5.2.4.1 - Reflected Cross-Site Scripting via section_id
Critical
CVE-2023-2499
RegistrationMagic <= 5.2.1.0 - Authentication Bypass
Medium
CVE-2023-2548
RegistrationMagic <= 5.2.0.5 - Authenticated (Admin+) Insecure Direct Object Reference to Arbitrary User Password Change
Medium
CVE-2023-25991
RegistrationMagic <= 5.1.9.2 - Cross-Site Request Forgery leading to Form Metadata Deletion
Medium
CVE-2023-23976
RegistrationMagic <= 5.1.9.2 - Improper Authorization to Price Change
Medium
CVE-2023-23989
RegistrationMagic <= 5.1.9.2 - Missing Authorization to Unauthenticated Content Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.