CyberRota Analysis
AI-GeneratedThe RegistrationMagic WordPress plugin prior to version 6.0.9.4 is vulnerable due to a lack of proper authorization and nonce checks, enabling unauthenticated attackers to overwrite form submissions and profile fields of non-administrator accounts. This could lead to unauthorized data manipulation and potential account compromise. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
The RegistrationMagic WordPress plugin before 6.0.9.4 does not perform authorization, ownership or nonce checks on a front-end submission-editing action, allowing unauthenticated attackers to overwrite other users' form submissions and the profile fields of the associated non-administrator WordPress accounts.