MEDIUM 5.3 NVD

CVE-2026-77793

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration server-side, allowing unauthenticated users to co

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration server-side, allowing unauthenticated users to complete a paid registration without paying and obtain an activated account.

References

https://wpscan.com/vulnerability/83f11a27-be9c-4b27-b4ea-d0c58e0d7829/

Published: 2026-09-02 · Source: NVD · Feed updated: 2026-09-02

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-09-02 via NVD.

vulnfeed aggregates 11639 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.