CVE-2026-82221

WordPress RegistrationMagic plugin <= 6.0.9.8 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in RegistrationMagic <= 6.0.9.8 versions.

Affected

Metagauss · RegistrationMagic

CVSS v3.1 PATCHSTACK

7.1 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L

EPSS

0.25% chance of exploitation in the next 30 days, 16th percentile

Published

2026-08-31

Updated

2026-09-01

Proof-of-concept exploits (2)

• gabrielftanaka/CVE-2026-822210★ · 2026-09-01
• gabrielftanaka/CVE-2026-82221-PoC0★ · 2026-09-01

References

• CVE Record
• NVD entry