CVE-2024-1990

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to blind SQL Injection via the ‘id’ parameter of the RMForm shortcode in all versions up to, and including, 5.3.1.0 due to insufficient escaping on the user supplied...

WordPress Plugin RegistrationMagic has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

CVE-2022-0420

The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rmformid parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks...

PT-2022-13169

Name of the Vulnerable Software and Affected Versions RegistrationMagic WordPress plugin versions prior to 5.0.2.2 Description The issue allows high privilege users to perform SQL injection attacks due to the lack of sanitization and escaping of the rm form id parameter in the Automation admin...

CVE-2020-8436

XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rmformid, rmtr, or formname parameter...

PT-2020-20135

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin version 4.6.0.0 Description An issue was discovered in the RegistrationMagic plugin for WordPress, where there is SQL injection via the rm analytics show form rm form id parameter. Recommendations For RegistrationMagic...

PT-2020-20136

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin version 4.6.0.0 for WordPress Description A cross-site scripting issue was found in the RegistrationMagic plugin for WordPress. The issue can be exploited via the rm form id, rm tr, or form name parameter...

PT-2020-20671

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin versions prior to 4.6.0.4 Description The issue allows remote authenticated users with minimal privileges to import custom vulnerable forms and change form settings via the class rm form settings controller.php file,...

PT-2020-20672

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin versions prior to 4.6.0.4 Description The issue allows remote authenticated users with minimal privileges to export submitted form data and settings. This is achieved through the export function in the RegistrationMagi...