Skip to content
OpenAdvisories

Vendor

Metagauss

121 known vulnerabilities.

Products

ProfileGrid – User Profiles, Groups and Communities 25 ProfileGrid 25 RegistrationMagic 21 EventPrime – Events Calendar, Bookings and Tickets 17 RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login 15 EventPrime 12 Download Plugin 3 Event Kikfyre 1 Download Theme 1 Memberships and User Profiles for WooCommerce – ProfileGrid WooCommerce Integration 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-73341

    WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.

    Metagauss RegistrationMagic
  • Critical 9.8
    CVE-2026-12073

    ProfileGrid - User Profiles, Groups and Communities <= 5.9.9.5 - Unauthenticated Privilege Escalation via Email Overwrite

    The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.9.9.5. This is due to the plugin not validating a `user_login` on registration form…

    Metagauss ProfileGrid – User Profiles, Groups and Communities Web / CMS
  • Critical 9.8
    CVE-2026-49764

    WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability

    Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.

    Metagauss RegistrationMagic
  • Critical 9.8
    CVE-2026-24378

    WordPress EventPrime plugin <= 4.2.8.0 - PHP Object Injection vulnerability

    Deserialization of Untrusted Data vulnerability in Metagauss EventPrime eventprime-event-calendar-management allows Object Injection.This issue affects EventPrime: from n/a through <= 4.2.8.0.

    Metagauss EventPrime
  • Critical 9.8
    CVE-2025-15403 Public exploit Scanner template

    RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order

    The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.7.1. This is due to the 'add_menu' function is accessible via the 'rm_user_exists' AJAX action and allows arbitrary updates to the 'admi…

    Metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login Web / CMS
  • Critical 9.8
    CVE-2017-20208

    RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection

    The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.7.9.3 (exclusive) via deserialization of untrusted input from the is_expired_by_da…

    Metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login Web / CMS
  • Critical 9.8
    CVE-2024-10508 Public exploit

    RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6 - Unauthenticated Privilege Escalation via Password Recovery

    The RegistrationMagic – User Registration Plugin with Custom Registration Forms plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0.2.6. This is due to the plugin not properly validating th…

    Metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login Web / CMS
  • Critical 9.3
    CVE-2024-30490 Scanner template

    WordPress ProfileGrid plugin <= 5.7.8 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Metagauss ProfileGrid.This issue affects ProfileGrid : from n/a through 5.7.8.

    Metagauss ProfileGrid
  • Critical 9.8
    CVE-2023-2499

    RegistrationMagic <= 5.2.1.0 - Authentication Bypass

    The RegistrationMagic plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 5.2.1.0. This is due to insufficient verification on the user being supplied during a Google social login through the plugin. This makes it pos…

    Metagauss RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login Web / CMS