CVE-2026-82221highCWE-79

CVE-2026-82221: high-severity vulnerability in Metagauss RegistrationMagic

WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

Published · Updated

41Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 7.1epss 0.3%
from disclosure to weapon1 days
Published on NVDAug 31
1st PoC+1d
exploitation probability
0.3%top 84% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Affected products
Metagauss · RegistrationMagic
public PoCs found — 1
githubgithub.com/gabrielftanaka/CVE-2026-82221-PoC★ 0
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Metagauss RegistrationMagic

In the same product, most dangerous first.

CVE-2026-49764CRITICALWordPress RegistrationMagic plugin <= 6.0.8.6 - Broken Authentication vulnerabilityEPSS 0.6%CVE-2023-49831HIGHWordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerabilityEPSS 0.6%CVE-2026-73341CRITICALWordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerabilityEPSS 0.6%CVE-2023-23976HIGHWordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price ChangeEPSS 0.5%CVE-2024-29113HIGHWordPress RegistrationMagic plugin <= 5.2.5.9 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.4%CVE-2026-32498HIGHWordPress RegistrationMagic plugin <= 6.0.7.6 - Broken Access Control vulnerabilityEPSS 0.4%
References
https://patchstack.com/database/wordpress/plugin/custom-registration-form-builder-with-submission-manager/vulnerability/wordpress-registrationmagic-plugin-6-0-9-8-cross-site-scripting-xss-vulnerability?_s_id=cve