Read the docs
TI-2017-14274 Aliases CVE-2017-20208GHSA-5g96-pc88-j7fx

RegistrationMagic - Custom Registration Forms <= 3.7.9.2 - PHP Object Injection

Priority MEDIUM 43CWE-502Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-502.

Summary

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to PHP Object Injection in all versions up to 3.7.9.3 (exclusive) via deserialization of untrusted input from the is_expired_by_date() function. This makes it possible for unauthenticated attackers to inject a PHP Object. The additional presence of a POP chain allows attackers to fetch a remote file and install it on the site.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00706 53rd percentileScored 2026-11-07
Fix Fixed RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (metagauss): 3.7.9.3

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MetagaussRegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Loginbefore 3.7.9.33.7.9.3Patch availableCNA
  • RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login VendorMetagauss Affected before 3.7.9.3 Fixed in 3.7.9.3 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:metagauss:registrationmagic:*:*:*:*:*:wordpress:*:*before 3.7.9.3VulnerableMetagauss
  • cpe:2.3:a:metagauss:registrationmagic:*:*:*:*:*:wordpress:*:* Versions before 3.7.9.3 Vulnerable ·Metagauss

Remediation

  • Fix · CNA RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login (metagauss) Fixed in 3.7.9.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2017-20208
  2. 2026-10-03 Alias added: GHSA-5g96-pc88-j7fx

References

Patch 1

Advisory 1

Other 1

  • TI-2021-07144 RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection CVSS 3.1HIGH 7.2
  • TI-2021-02957 RegistrationMagic <= 5.0.1.7 Authentication Bypass CVSS 3.1CRITICAL 9.8
  • TI-2024-08712 RegistrationMagic < 6.0.2.1 - Stored XSS CVSS 3.1MEDIUM 4.8
  • TI-2024-09734 RegistrationMagic – User Registration Plugin with Custom Registration Forms <= 6.0.2.6… CVSS 3.1CRITICAL 9.8
  • TI-2023-02346 RegistrationMagic <= 5.2.1.0 - Authentication Bypass CVSS 3.1CRITICAL 9.8
  • TI-2020-07568 In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows… CVSS 3.1HIGH 8.8
See all 33 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences