CVE-2025-14444

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to payment bypass due to insufficient verification of data authenticity on the 'process_paypal_sdk_payment' function in all versions up to, and including, 6.0.6.9. This is due to the plugin trusting client-supplied values for payment verification without validating that the payment actually went through PayPal. This makes it possible for unauthenticated attackers to bypass paid registration by manipulating payment status and activating their account without completing a real PayPal payment.

• CWE-345

• https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/6.0.6.7/includes/class_registration_magic.php#L232
• https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/tags/6.0.6.7/services/class_rm_paypal_service.php#L324
• https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk/services/class_rm_paypal_service.php#L324
• https://plugins.trac.wordpress.org/changeset/3426151
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0633bf06-6580-4feb-b98a-c465df3e2bed?source=cve

Published

Feb 18, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-14437The Hummingbird Performance plugin for WordPress is vulnerab…7.5
• CVE-2025-14438The Xagio SEO – AI Powered SEO plugin for WordPress is vulne…6.4
• CVE-2025-14440The JAY Login & Register plugin for WordPress is vulnerable …9.8
• CVE-2025-14441The Popupkit plugin for WordPress is vulnerable to arbitrary…4.3
• CVE-2025-14442The Secure Copy Content Protection and Content Locking plugi…5.3
• CVE-2025-14443A flaw was found in ose-openshift-apiserver. This vulnerabil…6.4
• CVE-2025-14445The Image Hotspot by DevVN plugin for WordPress is vulnerabl…6.4
• CVE-2025-14446The Popup Builder (Easy Notify Lite) plugin for WordPress is…5.4
• CVE-2025-14447The AnnunciFunebri Impresa plugin for WordPress is vulnerabl…4.3
• CVE-2025-14448The WP-Members Membership Plugin plugin for WordPress is vul…5.4
• CVE-2025-14449The BA Book Everything plugin for WordPress is vulnerable to…6.4
• CVE-2025-1445A vulnerability exists in RTU IEC 61850 client and server fu…8.7