CVE-2021-4073: Metagauss Registrationmagic

High severity, CVSS 8.1. EPSS: 6.8% chance of exploitation in the next 30 days.

The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.

Affected products

• Metagauss Registrationmagic: up to and including 5.0.1.7

Published 2021-12-14. Last modified 2026-06-17.