CVE-2025-14444 | RegistrationMagic Plugin up to 6.0.6.9 on WordPress Payment process_paypal_sdk_payment improper authentication
07:07 - 18 Feb 2026
A vulnerability labeled as critical has been found in RegistrationMagic Plugin up to 6.0.6.9 on WordPress. The affected element is the function process_paypal_sdk_payment of the component Payment Handler. The manipulation results in improper authentication. This vulnerability is known as CVE-2025-14444. It is possible to launch the attack remotely. No exploit is available.