CVE-2026-77793

The RegistrationMagic WordPress plugin prior to version 6.0.9.9 is vulnerable due to a lack of server-side validation for the total price of paid registrations, enabling unauthenticated users to bypass payment and gain access to activated accounts. This flaw poses a risk of unauthorized account creation and potential abuse of the registration system. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk of exploitation.