5.5
Medium
CVE-2026-77790 The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL…
Description
The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RegistrationMagic 6.0 | earliest → < 6.0.9.4 | 6.0.9.4 |
References
- wpscan.com wpscan.com
Timeline
- Published
- Last modified
Other CVEs of RegistrationMagic
The 11 CVEs of RegistrationMagic →
CVE-2026-77826
The RegistrationMagic WordPress plugin before 6.0.9.9 does not verify which application a Facebook access token was…
8.8
High
CVE-2026-77794
The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate a client-supplied quantity multiplier when…
5.3
Medium
CVE-2026-77793
The RegistrationMagic WordPress plugin before 6.0.9.9 does not validate the total price of a paid registration…
5.3
Medium
CVE-2026-77792
The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting…
7.5
High