CVE Catalog
CVE-2026-73341
CriticalCVSS 9.8Summary
An unauthenticated attacker can perform PHP Object Injection in RegistrationMagic versions up to 6.0.9.7.
Risk Assessment
Potential for dangerous server-side operations, including remote code execution if suitable gadgets are available.
Recommendation
Update the RegistrationMagic plugin to a version newer than 6.0.9.7.
Original NVD description (English source)
Unauthenticated PHP Object Injection in RegistrationMagic <= 6.0.9.7 versions.