CVE-2023-51543: WordPress RegistrationMagic plugin <= 5.2.5.0 - IP Limit Bypass vulnerability
Published Jun 4, 2024
·Updated
Authentication Bypass by Spoofing vulnerability in Metagauss RegistrationMagic allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects RegistrationMagic: from n/a through 5.2.5.0.
Affected Software
3 affected components
Metagauss Registrationmagic Wordpress<5.2.5.1
Metagauss RegistrationMagic>=n/a, <=5.2.5.0
RegistrationMagic<=5.2.5.0
Remediation
Information
Update to 5.2.5.1 or a higher version.
Event History
Jun 4, 2024
CVE Published
via MITRE·12:25 PM
Data Sourced
via MITRE·12:25 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-51543?
CVE-2023-51543 has been classified as a high severity vulnerability due to its potential for authentication bypass.
2
How do I fix CVE-2023-51543?
To fix CVE-2023-51543, update Metagauss RegistrationMagic to the latest version beyond 5.2.5.0.
3
What functionality is affected by CVE-2023-51543?
CVE-2023-51543 allows unauthorized access to functionality not properly constrained by access control lists (ACLs).
4
Which versions of RegistrationMagic are vulnerable to CVE-2023-51543?
CVE-2023-51543 affects all versions of RegistrationMagic from n/a up to and including 5.2.5.0.
5
What kind of vulnerability is CVE-2023-51543?
CVE-2023-51543 is an authentication bypass vulnerability that can be exploited through spoofing.