CVE-2022-0420

The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rmformid parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks...

PT-2022-13169

Name of the Vulnerable Software and Affected Versions RegistrationMagic WordPress plugin versions prior to 5.0.2.2 Description The issue allows high privilege users to perform SQL injection attacks due to the lack of sanitization and escaping of the rm form id parameter in the Automation admin...

CVE-2020-8436

XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rmformid, rmtr, or formname parameter...

PT-2020-20135

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin version 4.6.0.0 Description An issue was discovered in the RegistrationMagic plugin for WordPress, where there is SQL injection via the rm analytics show form rm form id parameter. Recommendations For RegistrationMagic...

PT-2020-20136

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin version 4.6.0.0 for WordPress Description A cross-site scripting issue was found in the RegistrationMagic plugin for WordPress. The issue can be exploited via the rm form id, rm tr, or form name parameter...