RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin vulnerabilities
We track 1 vulnerability in RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 7, 2022.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin vulnerabilities
- 7.2 High severity
RegistrationMagic – Custom Registration Forms…: Improper Neutralization of Special Elements used in an SQL Command
The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks