CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

9 matches found

Rapid7 Vulnerability Database (full)•added 2022/03/07 12:00 a.m.•5 views

CVE-2022-0420: Improper Neutralization of Special Elements used in an SQL Command

The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rmformid parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks...

7.2CVSS7.2AI score0.01484EPSS

SaveExploits1References3

CNNVD•added 2022/03/07 12:00 a.m.•19 views

WordPress plugin RegistrationMagic SQL注入漏洞

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A SQL injection vulnerability exists in WordPress RegistrationMagic Plugin prior to version 5.0.2.2, which ste...

7.2CVSS6.2AI score0.01484EPSS

SaveExploits1References3

NVD•added 2020/03/12 2:15 p.m.•17 views

CVE-2020-8436

XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rmformid, rmtr, or formname parameter...

6.1CVSS6.1AI score0.01353EPSS

SaveExploits2References3

NVD•added 2020/03/12 2:15 p.m.•26 views

CVE-2020-8435

An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rmanalyticsshowform rmformid parameter...

8.1CVSS8.5AI score0.01919EPSS

SaveExploits1References3

OSV•added 2020/03/12 2:15 p.m.•15 views

CVE-2020-8435

An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rmanalyticsshowform rmformid parameter...

8.1CVSS7.3AI score0.01919EPSS

SaveExploits1References3

Prion•added 2020/03/12 2:15 p.m.•26 views

Sql injection

An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rmanalyticsshowform rmformid parameter...

5.5CVSS8.5AI score0.01919EPSS

SaveExploits1References3Affected Software1

CVE•added 2020/03/12 1:32 p.m.•98 views

CVE-2020-8435

Summary: CVE-2020-8435 concerns the WordPress RegistrationMagic plugin (v4.6.0.0) with a SQL injection via the rm_analytics_show_form rm_form_id parameter. The issue is documented across multiple feeds and is described as an injection vulnerability that could enable unauthorized access to the bac...

8.1CVSS8.4AI score0.01919EPSS

SaveExploits1References3Affected Software1

Rapid7 Vulnerability Database (full)•added 2020/03/12 12:00 a.m.•4 views

CVE-2020-8435: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rmanalyticsshowform rmformid parameter...

8.1CVSS7.5AI score0.01919EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2020/03/12 12:00 a.m.•5 views

CVE-2020-8436: Improper Neutralization of Input During Web Page Generation

XSS was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress via the rmformid, rmtr, or formname parameter...

6.1CVSS6.3AI score0.01353EPSS

SaveExploits2References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by