Known CVE

RegistrationMagic <= 5.0.1.7 - Authentication Bypass

RegistrationMagic WordPress plugin versions <= 5.0.1.7 contain an authentication bypass caused by missing identity validation in social_login_using_email(), letting unauthenticated users log in as any site user, exploit requires knowing a valid username.

CVE-2021-4073

Critical2021CVSS 9.8CWE-287

cve2021 · wordpress · wp · wp-plugin · metagauss · registrationmagic · auth-bypass · vkev

Verified scans run this check after you prove you own the site.

All known CVEs View the checks catalog National Vulnerability Database

Scan a website