WordPress RegistrationMagic plugin SQL injection vulnerability

WordPress is the Wordpress Foundation’s set of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on servers with PHP and MySQL.The WordPress RegistrationMagic plugin was vulnerable to SQL injection before 5.0.1.6, which stems from the lack of validation of external input SQL statements in the rm_chronos_ajax AJAX operation during bulk copy tasks. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.