Skip to main content

Registrationmagic CVE-2024-25935

MEDIUM
Missing Authorization (CWE-862)
2024-04-11 audit@patchstack.com
Authentication Bypass Registrationmagic
4.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
4.3 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
CVE Published
Apr 11, 2024 - 01:24 cve.org
MEDIUM 4.3

DescriptionCVE.org

Missing Authorization vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.2.5.9.

AnalysisAI

Missing Authorization vulnerability in Metagauss RegistrationMagic.2.5.9. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authorization (CWE-862), which allows attackers to access resources or perform actions without proper authorization checks. Missing Authorization vulnerability in Metagauss RegistrationMagic.2.5.9. Affected products include: Metagauss Registrationmagic. Version information: through 5.2.5.9..

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Implement role-based access control, validate authorization on every request server-side, apply principle of least privilege.

More in Registrationmagic

View all
CVE-2020-9458 HIGH POC
8.8 Mar 06

In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (wi
CVE-2020-9457 HIGH POC
8.8 Mar 06

The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) t
CVE-2020-9456 HIGH POC
8.8 Mar 06

In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (wi
CVE-2020-9454 HIGH POC
8.8 Mar 06

A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requ
CVE-2021-4073 HIGH POC
8.1 Dec 14

The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including

CVE-2020-8435 HIGH POC
8.1 Mar 12

An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. Rated high severity (CVSS 8.1), this vuln
CVE-2022-0420 HIGH POC
7.2 Mar 07

The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using
CVE-2020-8436 MEDIUM POC
6.1 Mar 12

XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rm_form_id, rm_tr, or form_name paramet
CVE-2023-2499 CRITICAL
9.8 May 16

The RegistrationMagic plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.2.
CVE-2026-49764 CRITICAL
9.8 Jun 15

Authentication bypass in the RegistrationMagic WordPress plugin (versions up to and including 6.0.8.6) allows unauthenti
CVE-2024-10508 CRITICAL
9.8 Nov 09

The RegistrationMagic - User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to pr
CVE-2024-1990 HIGH
8.8 Apr 09

The RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vu

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2025-20362 MEDIUM POC
6.5
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2012-1723 CRITICAL POC
9.8
CVE-2017-10271 HIGH POC
7.5
CVE-2015-1427 CRITICAL POC
9.8
CVE-2025-3248 CRITICAL POC
9.8

Share

CVE-2024-25935 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy