PT-2026-84726 · WordPress · Custom-Registration-Form-Builder-With-Submission-Manager

Charles Vosburgh

·

CVE-2026-77793

·

تاريخ النشر

2026-08-31

·

تاريخ التحديث

2026-09-02

CVSS v3.1

5.3

متوسطة

المتجهAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions RegistrationMagic versions prior to 6.0.9.9
Description An issue exists where the plugin fails to validate the total price of a paid registration on the server side. This lack of server-side payment verification allows unauthenticated users to bypass the payment process and obtain an activated account without paying.
Recommendations Update RegistrationMagic to version 6.0.9.9 or later.

استغلال

إصلاح

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
dbugs@ptsecurity.com

تصنيف نقاط الضعف

CWE-602

المعرّفات ذات الصلة

CVE-2026-77793

المنتجات المتأثرة

Custom-Registration-Form-Builder-With-Submission-Manager