CVE-2026-24374
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-04-28

Assigner: Patchstack

Description
Cross-Site Request Forgery (CSRF) vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Cross Site Request Forgery.This issue affects RegistrationMagic: from n/a through <= 6.0.6.9.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2026-01-22
Last Modified
2026-04-28
Generated
2026-06-16
AI Q&A
2026-01-22
EPSS Evaluated
2026-06-15
NVD
CVE-2026-24374
EUVD
EUVD-2026-3798
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
metagauss registrationmagic to 6.0.6.9 (inc)
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-352 The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

CVE-2026-24374 is a Cross Site Request Forgery (CSRF) vulnerability in the WordPress RegistrationMagic Plugin up to version 6.0.6.9. It allows a malicious actor to trick authenticated users with higher privileges into performing unwanted actions by having them click a malicious link, visit a crafted page, or submit a form. This requires user interaction and is classified as low severity. [1]

Impact Analysis

This vulnerability can lead to unauthorized actions being executed on your WordPress site by tricking privileged users into performing them unknowingly. While it is considered low severity and unlikely to be widely exploited, it can still result in broken access control and potential misuse of user privileges until patched. [1]

Detection Guidance

This vulnerability is a Cross Site Request Forgery (CSRF) issue in the RegistrationMagic WordPress plugin up to version 6.0.6.9. Detection involves checking the plugin version installed on your WordPress site. You can detect the vulnerable version by running commands to list installed plugins and their versions, such as: `wp plugin list` (using WP-CLI) or by inspecting the plugin version in the WordPress admin dashboard. There are no specific network commands or signatures for detecting CSRF attacks related to this vulnerability. [1]

Mitigation Strategies

The immediate mitigation step is to update the RegistrationMagic plugin to version 6.0.7.0 or later, where the vulnerability is fixed. Additionally, ensure that users with higher privileges are cautious about clicking untrusted links or submitting forms. Using security plugins that provide automated updates and rapid vulnerability mitigation can also help reduce risk. [1]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-24374. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart