Skip to content
PluginCanary

RegistrationMagic

RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login
by Metagauss · 7,000+ active installs · Checked 3 Nov 2026
Healthy

Healthy: maintained, last release 29 Oct 2026, 76 releases in 24 months, no unpatched vulnerabilities.

86/ 100 Canary Score
Sub-scores for RegistrationMagic
Ownership100
Maintenance100
Security60
SupportNo data
ReputationNo data

How the score works

Quick answers

Is RegistrationMagic still maintained?
Yes. Last release 29 Oct 2026, 76 releases in the last 24 months. 29 Oct 2026 · wordpress.org
Who owns RegistrationMagic, and has it changed hands?
No change recorded. Main committer metagauss since Dec 2019. 3 Nov 2026 · SVN log
Was RegistrationMagic removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is RegistrationMagic safe?
62 known vulnerabilities, all fixed (latest in 6.0.9.9). Not on the exploited list. 3 Sep 2026 · Wordfence Intelligence
Is the latest RegistrationMagic update safe to install?
No ownership change before 6.1.0.3. No one-star spike after it. 29 Oct 2026 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
Registrationmagic17 Oct 2017 to 6 Dec 2019, 203 commits
metagauss9 Dec 2019 to 29 Oct 2026, 584 commits
profilegrid28 Feb 2020 to 26 Mar 2020, 3 commits
profilegrid020 Oct 2023 to 5 Dec 2023, 8 commits

4 committers recorded. No ownership change since 2014.

Maintenance

Last release
6 days ago
Releases, 24 months
76
Tested up to
7.1 current
Requires PHP
7.2 supported 8.2+
Releases per quarter
Releases per quarter for RegistrationMagic
Q1 20248
Q2 202411
Q3 202415
Q4 202412
Q1 202510
Q2 20259
Q3 202510
Q4 20258
Q1 202611
Q2 202611
Q3 20268
Q4 20262

Last release 29 Oct 2026. Tested with WordPress 7.1 (current).

Reputation

Last 90 days: no reviews. Lifetime: 4.5.

Rating distribution
5 star384
4 star21
3 star3
2 star10
1 star41

Security record

29 vulnerabilities in 24 months (62 on record), all patched (latest fixed in 6.0.9.9).

Show 62 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
3 Sep 2026RegistrationMagic <= 6.0.9.8 - Authentication Bypass9.8<= 6.0.9.86.0.9.9Patched before disclosure
3 Sep 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.9 - Unauthenticated Stored Cross-Site Scripting7.2< 6.0.9.96.0.9.9Patched before disclosure
31 Aug 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.8 - Unauthenticated Stored Cross-Site Scripting7.2<= 6.0.9.86.0.9.9Patched before disclosure
31 Aug 2026RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass5.3<= 6.0.9.86.0.9.9Patched before disclosure
31 Aug 2026RegistrationMagic <= 6.0.9.8 - Unauthenticated Payment Bypass5.3<= 6.0.9.86.0.9.9Patched before disclosure
28 Aug 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.8 - Authentication Bypass7.3<= 6.0.9.86.0.9.9Patched before disclosure
26 Aug 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Authenticated (Administrator+) SQL Injection4.9< 6.0.9.46.0.9.4Patched before disclosure
18 Aug 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.9.7 - Unauthenticated PHP Object Injection8.1<= 6.0.9.76.0.9.8Patched before disclosure
30 Jul 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Missing Authorization5.3< 6.0.9.46.0.9.4Patched before disclosure
30 Jul 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login < 6.0.9.4 - Unauthenticated Insecure Direct Object Reference5.3< 6.0.9.46.0.9.4Patched before disclosure
20 Jul 2026RegistrationMagic <= 6.0.9.4 - Unauthenticated Price Manipulation5.3<= 6.0.9.46.0.9.5Patched before disclosure
30 Jun 2026RegistrationMagic <= 6.0.9.1 - Cross-Site Request Forgery to Privilege Escalation via 'rmc_assign_user_role_action' Parameter8.8<= 6.0.9.16.0.9.2Patched before disclosure
26 Jun 2026RegistrationMagic <= 6.0.8.6 - Authenticated (Subscriber+) Authentication Bypass via Forged PayPal IPN Request5.3<= 6.0.8.66.0.8.7Patched before disclosure
4 Jun 2026RegistrationMagic - User Registration Forms Plugin <= 6.0.8.6 - Missing Authorization5.3<= 6.0.8.66.0.8.7Patched before disclosure
20 Mar 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.6 - Missing Authorization5.3<= 6.0.7.66.0.7.7Patched before disclosure
12 Mar 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authentication Bypass9.8<= 6.0.7.16.0.7.2Patched before disclosure
18 Feb 2026RegistrationMagic <= 6.0.7.6 - Missing Authorization4.3<= 6.0.7.66.0.7.71
17 Feb 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.9 - Unauthenticated Payment Bypass via rm_process_paypal_sdk_payment5.3<= 6.0.6.96.0.7.0Patched before disclosure
16 Feb 2026RegistrationMagic < 6.0.7.2 - Missing Authorization4.3< 6.0.7.26.0.7.2Patched before disclosure
27 Jan 2026RegistrationMagic <= 6.0.7.4 - Missing Authorization to Unauthenticated Arbitrary Settings Modification5.3<= 6.0.7.46.0.7.5Patched before disclosure
23 Jan 2026RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.7.1 - Authenticated (Subscriber+) Information Exposure5.3<= 6.0.7.16.0.7.2Patched before disclosure
16 Jan 2026RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order9.8<= 6.0.7.16.0.7.2Patched before disclosure
10 Jan 2026RegistrationMagic <= 6.0.6.9 - Cross-Site Request Forgery4.3<= 6.0.6.96.0.7.0Patched before disclosure
15 Dec 2025RegistrationMagic <= 6.0.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'RM_Forms' Shortcode6.4<= 6.0.6.76.0.6.8Patched before disclosure
7 Oct 2025RegistrationMagic - Custom Registration Forms, User Registration, Payment, and User Login <= 6.0.6.2 - Authenticated (Administrator+) SQL Injection7.2<= 6.0.6.26.0.6.3Patched before disclosure

Changelog mentions of security fixes: 6.0.9.2 (security); 6.0.9.4 (security); 6.0.9.5 (security); 6.0.9.6 (security); 6.0.9.7 (security).

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

100% of 1 support threads resolved in the last 2 months.

Momentum

7,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for RegistrationMagic
4 May 2026467
11 May 20264,207
18 May 20264,771
25 May 20261,090
1 Jun 20264,430
8 Jun 20264,377
15 Jun 20266,728
22 Jun 20264,786
29 Jun 20261,435
6 Jul 20264,718
13 Jul 20264,792
20 Jul 20264,213
27 Jul 20264,524
3 Aug 20261,917
10 Aug 20264,856
17 Aug 20261,858
24 Aug 20264,833
31 Aug 20261,543
7 Sep 20264,117
14 Sep 20261,510
21 Sep 20264,480
28 Sep 20261,488
5 Oct 20262,133
12 Oct 20264,795
19 Oct 20261,748
26 Oct 20265,233
2 Nov 2026277

Weekly downloads over the last 4 weeks are 11% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Gravatar EnhancedScore 100 · 100,000+WP User AvatarsScore 100 · 20,000+One User AvatarScore 96 · 100,000+Simple Local AvatarsScore 96 · 100,000+LoginWP (Formerly Peter's LoginScore 96 · 80,000+

Facts

Version6.1.0.3
AuthorMetagauss
Added17 Dec 2014
Last updated29 Oct 2026
Active installs7,000+
Requires WordPress5.2.0
Tested up to7.1.4
Requires PHP7.2
CategoryUser Management & Authentication > User Registration & Login
Tagspayment form, registration, registration form, User Registration, event registration

Other plugins by this author: Download Plugin, EventPrime - Events Calendar, Bookings, Tickets & AI, ProfileGrid - User Profiles, Groups and Communities, Download Theme, Themeflection Numbers - Number Counter and Animated Numbers, Memberships and User Profiles for WooCommerce - ProfileGrid WooCommerce Integration, Blog Post Sidebar

Questions

Is RegistrationMagic still maintained?

Yes. Last release 29 Oct 2026, 76 releases in the last 24 months.

Who owns RegistrationMagic, and has it changed hands?

No change recorded. Main committer metagauss since Dec 2019.

Was RegistrationMagic removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is RegistrationMagic safe?

62 known vulnerabilities, all fixed (latest in 6.0.9.9). Not on the exploited list.

Is the latest RegistrationMagic update safe to install?

No ownership change before 6.1.0.3. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue