CVE-2026-24374
BaseFortify
Publication date: 2026-01-22
Last updated on: 2026-04-28
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| metagauss | registrationmagic | to 6.0.6.9 (inc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2026-24374 is a Cross Site Request Forgery (CSRF) vulnerability in the WordPress RegistrationMagic Plugin up to version 6.0.6.9. It allows a malicious actor to trick authenticated users with higher privileges into performing unwanted actions by having them click a malicious link, visit a crafted page, or submit a form. This requires user interaction and is classified as low severity. [1]
How can this vulnerability impact me? :
This vulnerability can lead to unauthorized actions being executed on your WordPress site by tricking privileged users into performing them unknowingly. While it is considered low severity and unlikely to be widely exploited, it can still result in broken access control and potential misuse of user privileges until patched. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
This vulnerability is a Cross Site Request Forgery (CSRF) issue in the RegistrationMagic WordPress plugin up to version 6.0.6.9. Detection involves checking the plugin version installed on your WordPress site. You can detect the vulnerable version by running commands to list installed plugins and their versions, such as: `wp plugin list` (using WP-CLI) or by inspecting the plugin version in the WordPress admin dashboard. There are no specific network commands or signatures for detecting CSRF attacks related to this vulnerability. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation step is to update the RegistrationMagic plugin to version 6.0.7.0 or later, where the vulnerability is fixed. Additionally, ensure that users with higher privileges are cautious about clicking untrusted links or submitting forms. Using security plugins that provide automated updates and rapid vulnerability mitigation can also help reduce risk. [1]