CVE-2026-77790 — RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter
The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such a…
Published: 2026-08-26 · CVSS: 5.5 · CVSS 3.1
The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7