RegistrationMagic WordPress Plugin PayPal Capture Validation Bypass

Executive Summary

This vulnerability affects the RegistrationMagic WordPress plugin before version 6.0.9.5. It fails to verify key details of PayPal payments during registration finalization. The plugin only checks if a payment capture status is COMPLETED but does not validate the amount, currency, payee, or whether the capture was used before. This allows attackers to finalize expensive registrations using low-value payments and reuse the same payment for multiple registrations.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, inspect WordPress sites using the RegistrationMagic plugin versions before 6.0.9.5. Check for registrations finalized with mismatched PayPal capture amounts, currencies, or payees. Review server logs for PayPal capture replay attempts across multiple registrations.

Useful 0 Not Useful 0

Impact Analysis

If you use the vulnerable plugin, an attacker could register for expensive events or services without paying the full amount. Your organization might lose revenue as registrations are finalized with incorrect payments. Additionally, sensitive user data collected during registration could be exposed if the plugin's integrity is compromised.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to non-compliance with GDPR or HIPAA if it results in unauthorized access to personal or health data during registration. GDPR requires data protection by design, and HIPAA mandates secure handling of health information. The flaw may violate these regulations if user data is compromised due to improper payment verification.

Useful 0 Not Useful 0

Mitigation Strategies

Update the RegistrationMagic WordPress plugin to version 6.0.9.5 or later to address the vulnerability.

Useful 0 Not Useful 0