A vulnerability, which was classified as problematic, was found in RegistrationMagic Plugin up to 6.0.6.7 on WordPress. This issue affects the function RM_Forms of the component Shortcode Handler. The manipulation results in cross site scripting.

This vulnerability is known as CVE-2025-13610. It is possible to launch the attack remotely. No exploit is available.