The vulnerability CVE-2026-24373 affects Metagauss RegistrationMagic, a custom registration form builder plugin. It involves incorrect privilege assignment that can lead to privilege escalation. The affected versions include all versions up to and including 6.0.7.1. The CVSS score of 8.1 reflects a high severity with network attack vector, high complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to escalate privileges within the affected system, potentially leading to full compromise of the RegistrationMagic plugin's functionality and associated data. This could impact confidentiality, integrity, and availability of the system where the plugin is installed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the plugin's administrative interfaces and monitor for suspicious activity related to privilege escalation attempts.