CVE-2026-77793 — RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field

CVE-2026-77793

RegistrationMagic < 6.0.9.9 - Unauthenticated Payment Bypass via Omitted Price Field PUBLISHED

Description (CNA)

The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration server-side, allowing unauthenticated users to complete a paid registration without paying and obtain an activated account.

Affected (CNA)

Vendor / product	Versions
Unknown / RegistrationMagic	affected 0 before 6.0.9.9

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/83f11a27-be9c-4b27-b4ea-d0c58e0d7829/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.