CVE-2026-110984

The RegistrationMagic WordPress plugin, in versions prior to 6.1.0.4 , is vulnerable to SQL injection . The flaw occurs because the plugin fails to properly sanitize and escape the rm_fromdate and rm_dateupto parameters before including them in a SQL statement. This vulnerability could allow high...

CVE-2026-110984 RegistrationMagic < 6.1.0.4 - Admin+ SQLi via 'rm_fromdate' and 'rm_dateupto' Parameters

The RegistrationMagic WordPress plugin before 6.1.0.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks...