← CVE Intelligence

CVE-2026-77790

RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter PUBLISHED

Description (CNA)

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.

Affected (CNA)

Vendor / productVersions
Unknown / RegistrationMagicaffected 0 before 6.0.9.4

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.