CVE-2026-24373: Metagauss RegistrationMagic, заобикаляне на вход и

Описание

Оригинално описание

Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This issue affects RegistrationMagic: from n/a through <= 6.0.7.1.

Засегнати продукти

• Metagauss RegistrationMagic: до 6.0.7.1

Вид слабост

• CWE-266 Неправилно задаване на привилегии

История

Други уязвимости в Metagauss RegistrationMagic

• 7.4CVE-2026-82225
• 7.1CVE-2026-82221
• 9.8CVE-2026-73341
• 9.8CVE-2026-49764
• 7.5CVE-2026-32498

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-24373
• https://nvd.nist.gov/vuln/detail/CVE-2026-24373
• https://patchstack.com/database/Wordpress/Plugin/custom-registration-form-builder-with-submission-manager/vulnerability/wordpress-registrationmagic-plugin-6-0-7-1-account-takeover-vulnerability?_s_id=cve