CVE-2022-0420: vulnerability in RegistrationMagic – Custom Registration Forms…
RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection
Published · Updated
Follow this CVE+ Monitor RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 1.5%
The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks
Affected products
Unknown · RegistrationMagic – Custom Registration Forms, User Registration and User Login PluginRelated CVEs — RegistrationMagic – Custom Registration Forms…
In the same product, most dangerous first.