CVE-2021-4073

概要

参考情報

• plugins.trac.wordpress.org/changeset/2635173/custom-registration-form-builder-with-submission-manager/trunk/services/class_rm_user_services.php · Patch
• wordfence.com/blog/2021/12/authentication-bypass-vulnerability-patched-in-user-registration-plugin · Exploit
• wordfence.com/vulnerability-advisories · Third Party Advisory

registrationmagic のその他の脆弱性

• CVE-2017-20208緊急 9.8The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to PHP Obje…
• CVE-2024-9390中 4.8The RegistrationMagic WordPress plugin before 6.0.2.1 does not sanitise and escape some of its settings, which could allow high privilege u…
• CVE-2025-24686中 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss RegistrationMagic custom-reg…
• CVE-2023-49831高 7.5Missing Authorization vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Exploitin…
• CVE-2024-10508緊急 9.8The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation v…