PRODUCT PROFILE

registrationmagic

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危CVE-2021-248622022/01/10

RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue.

registrationmagicPoC 已收录

CVSS7.2EPSS 36.4%

高危CVE-2021-40732021/12/14

RegistrationMagic <= 5.0.1.7 - Authentication Bypass

The RegistrationMagic WordPress plugin made it possible for unauthenticated users to log in as any site user, including administrators, if they knew a valid username on the site due to missing identity validation in the social login function social_login_using_email() of the plugin. This affects versions equal to, and less than, 5.0.1.7.

registrationmagicPoC 已收录

CVSS8.1