← Database

CVE-2022-0420

HIGH CVSS: 7.2 Published: 2022-03-07 Modified: 2026-06-17

Description

The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks

Affected Platforms

Metagauss Registrationmagic

Weakness Type

CWE-89, CWE-89

References