CVE-2024-2951: WordPress RegistrationMagic plugin <= 5.3.0.0 - Cross Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery (CSRF) vulnerability in Metagauss RegistrationMagic.This issue affects RegistrationMagic: from n/a through 5.3.0.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress RegistrationMagicto a version that resolves this vulnerability.Fixed in 5.3.1.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-2951?
CVE-2024-2951 has been classified as a high severity Cross-Site Request Forgery vulnerability.
How do I fix CVE-2024-2951?
To fix CVE-2024-2951, upgrade Metagauss RegistrationMagic to the latest version available beyond 5.3.0.0.
Which versions of RegistrationMagic are affected by CVE-2024-2951?
CVE-2024-2951 affects all versions of RegistrationMagic from n/a up to and including 5.3.0.0.
What is a Cross-Site Request Forgery vulnerability like CVE-2024-2951?
A Cross-Site Request Forgery vulnerability allows an attacker to perform actions on behalf of a user without their consent.
Who is the vendor affected by CVE-2024-2951?
The vendor affected by CVE-2024-2951 is Metagauss, specifically for their RegistrationMagic plugin.