CVE-2024-25935: WordPress RegistrationMagic plugin <= 5.2.5.9 - Broken Access Control vulnerability
Published Mar 21, 2024
·Updated
Missing Authorization vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.2.5.9.
Affected Software
3 affected components
Metagauss Registrationmagic Wordpress<5.2.6.0
Metagauss RegistrationMagic<=5.2.5.9
RegistrationMagic<=5.2.5.9
Remediation
Information
Update to 5.2.6.0 or a higher version.
Event History
Mar 21, 2024
CVE Published
via MITRE·05:31 PM
Data Sourced
via MITRE·05:31 PM
RemedyDescriptionSeverityWeakness
Apr 11, 2024
Data Sourced
via NVD·01:24 AM
DescriptionSeverityWeaknessAffected Software
Aug 9, 57065
Event
via NVD·03:31 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-25935?
CVE-2024-25935 is classified as a Missing Authorization vulnerability which can lead to unauthorized access.
2
How do I fix CVE-2024-25935?
To fix CVE-2024-25935, update Metagauss RegistrationMagic to version 5.2.6.0 or later.
3
Which versions of RegistrationMagic are affected by CVE-2024-25935?
CVE-2024-25935 affects Metagauss RegistrationMagic versions up to and including 5.2.5.9.
4
What type of vulnerability is CVE-2024-25935?
CVE-2024-25935 is categorized as a Missing Authorization vulnerability.
5
What impact does CVE-2024-25935 have on users?
CVE-2024-25935 allows unauthorized users to access restricted functionalities within the RegistrationMagic plugin.