CVE-2026-0929: RegistrationMagic < 6.0.7.2 - Subscriber+ Form Creation
Published Feb 16, 2026
·Updated
The RegistrationMagic WordPress plugin before 6.0.7.2 does not have proper capability checks, allowing subscribers and above to create forms on the site.
Affected Software
1 affected component
RegistrationMagic RegistrationMagic<6.0.7.2
Event History
Feb 16, 2026
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
DescriptionWeakness
Data Sourced
via NVD·07:17 AM
DescriptionSeverityWeakness
Feb 21, 58102
Event
via NVD·01:54 AM
Frequently Asked Questions
1
What is the severity of CVE-2026-0929?
CVE-2026-0929 is considered a medium severity vulnerability due to improper capability checks allowing unauthorized form creation.
2
How do I fix CVE-2026-0929?
To fix CVE-2026-0929, update the RegistrationMagic plugin to version 6.0.7.2 or later.
3
Who is affected by CVE-2026-0929?
CVE-2026-0929 affects all users of the RegistrationMagic plugin versions prior to 6.0.7.2.
4
What are the consequences of CVE-2026-0929?
The consequences of CVE-2026-0929 include unauthorized users potentially creating forms, leading to data exposure or manipulation.
5
How can I determine if I am using an affected version related to CVE-2026-0929?
Check your RegistrationMagic plugin version in the WordPress admin dashboard to see if it is below 6.0.7.2.