High
CVE-2026-77792
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 62
Reset filters
Critical
CVE-2026-77826
RegistrationMagic <= 6.0.9.8 - Authentication Bypass
High
CVE-2026-82221
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2026-77794
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
Medium
CVE-2026-77793
RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass
High
CVE-2026-82225
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.8 - Authentication Bypass
Medium
CVE-2026-77790
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Authenticated (Administrator+) SQL Injection
High
CVE-2026-73341
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.7 - Unauthenticated PHP Object Injection
Medium
CVE-2026-15255
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Unauthenticated Insecure Direct Object Reference
Medium
CVE-2026-15257
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Missing Authorization
Medium
CVE-2026-15208
RegistrationMagic <= 6.0.9.4 - Unauthenticated Price Manipulation
High
CVE-2026-12158
RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter
Medium
CVE-2026-9242
RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request
Medium
CVE-2026-49764
RegistrationMagic – User Registration Forms Plugin <= 6.0.8.6 - Missing Authorization
Medium
CVE-2026-32498
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.6 - Missing Authorization
Critical
CVE-2026-24373
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authentication Bypass
Medium
CVE-2026-32385
RegistrationMagic <= 6.0.7.6 - Missing Authorization
Medium
CVE-2025-14444
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment
Medium
CVE-2026-0929
RegistrationMagic < 6.0.7.2 - Missing Authorization
Medium
CVE-2026-1054
RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification
Medium
CVE-2025-15520
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authenticated (Subscriber+) Information Exposure
Critical
CVE-2025-15403
RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order
Medium
CVE-2026-24374
RegistrationMagic <= 6.0.6.9 - Cross-Site Request Forgery
Medium
CVE-2025-13610
RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.