Description
WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently login as any user, including administrative users. WordPress Plugin RegistrationMagic-Custom Registration Forms, User Registration, Payment, and User Login version 5.0.1.7 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 5.0.1.8 or latest