CVE-2023-51544 MEDIUM

CVE-2023-51544: WordPress RegistrationMagic plugin <= 5.2.5.0 - Form Submission Limit Bypass vulnerability

Vendor Metagauss
Product RegistrationMagic
Weakness CWE-799
Published June 4, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

What the vulnerability does

01Description

Improper Control of Interaction Frequency vulnerability in Metagauss RegistrationMagic allows Functionality Misuse.This issue affects RegistrationMagic: from n/a through 5.2.5.0.

Explanation of Vulnerability in Simple Terms

02Summary

RegistrationMagic versions up to 5.2.5.0 contain an integrity vulnerability allowing network-based attackers to modify data without authentication. The attack requires no user interaction and exploits a weakness in input validation or access controls. Site administrators should update to a version newer than 5.2.5.0 to remediate this issue.

What an attacker can do

03Attacker Capabilities

Modify data on the site without logging in or user interaction.

Potential impact on your site

04Site Impact

Attackers can alter form submissions, user data, or other site content without authorization.

Conditions required to exploit

05Prerequisites

Network access to the site; no authentication or user interaction required.

Key dates

06Disclosure timeline

June 4, 2024 CVE published
April 28, 2026 Record updated