Security Advisory
CVE-2026-77794
5.3
MEDIUM
Vulnerability Description
The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when calculating the total price of a paid registration, allowing unauthenticated users to register without paying and obtain an activated account holding the role the form grants.
Published Date
September 2, 2026
Official Source
NIST NVD Advisory