CVE-2021-4073

The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.

• CWE-287

• https://plugins.trac.wordpress.org/changeset/2635173/custom-registration-form-builder-with-submission-manager/trunk/services/class_rm_user_services.phpPatch, Third Party Advisory
• https://www.wordfence.com/blog/2021/12/authentication-bypass-vulnerability-patched-in-user-registration-plugin/Exploit, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4073Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/2635173/custom-registration-form-builder-with-submission-manager/trunk/services/class_rm_user_services.phpPatch, Third Party Advisory
• https://www.wordfence.com/blog/2021/12/authentication-bypass-vulnerability-patched-in-user-registration-plugin/Exploit, Third Party Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4073Third Party Advisory

Published

Dec 14, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40724Acrobat Reader for Android versions 21.8.0 (and earlier) are…7.8
• CVE-2021-40725Acrobat Reader DC versions 2021.005.20060 (and earlier), 202…7.8
• CVE-2021-40726Acrobat Reader DC versions 2021.005.20060 (and earlier), 202…7.8
• CVE-2021-40727Access of Memory Location After End of Buffer (CWE-7887.8
• CVE-2021-40728Adobe Acrobat Reader DC version 21.007.20095 (and earlier), …7.8
• CVE-2021-40729Adobe Acrobat Reader DC version 21.007.20095 (and earlier), …3.3
• CVE-2021-40730Adobe Acrobat Reader DC version 21.007.20095 (and earlier), …3.3
• CVE-2021-40731Adobe Acrobat Reader DC version 21.007.20095 (and earlier), …7.8
• CVE-2021-40732XMP Toolkit version 2020.1 (and earlier) is affected by a nu…6.1
• CVE-2021-40733Adobe Animate version 21.0.9 (and earlier) is affected by a …7.8
• CVE-2021-40734Adobe Audition version 14.4 (and earlier) is affected by a m…7.8
• CVE-2021-40735Adobe Audition version 14.4 (and earlier) is affected by a m…7.8