Critical · 9.8 CVE-2026-49764 EUVD-2026-36888GHSA-2hf6-3gj9-p8hw

WordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerability

Published Jun 15, 2026 · Updated Jun 15, 2026 · Assigned by Patchstack

Vendor: Metagauss Product: RegistrationMagic

Description

Unauthenticated Broken Authentication in RegistrationMagic <= 6.0.8.6 versions.

Affected products

Vendor	Product	Affected	Fixed
Metagauss	RegistrationMagic	≤ 6.0.8.6	—

References

https://patchstack.com/database/wordpress/plugin/custom-registration-form-builder-with-submission-manager/vulnerability/wordpress-registrationmagic-plugin-6-0-8-6-broken-authentication-vulnerability?_s_id=cve vdb-entry