Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:registrationmagic_–_custom_registration_forms,_user_registration_and_user_login_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductRegistrationmagic – Custom Registration Forms, User Registration And User Login Plugin (2c87c35c-ce3b-57f9-bd15-7c697bf9ad85)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-0420 vulnerable 2026-06-08 05:39:10.015820 RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection
The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks
Published: 2022-03-07T08:16:33.000Z
Updated: 2024-08-02T23:25:40.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-24862 vulnerable 2026-06-08 05:30:39.371749 RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection
The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue
Published: 2022-01-10T15:30:30.000Z
Updated: 2024-08-03T19:49:13.521Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.