WordPress Plugin Vulnerabilities

RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter

Description

The plugin does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.

Proof of Concept

Affects Plugins

Plugin icon
custom-registration-form-builder-with-submission-manager
Fixed in 6.0.9.4

References

CVE
CVE-2026-77790

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89
CVSS
4.1 (medium)

Miscellaneous

Original Researcher
Meher Sudhakar Abbireddi
Submitter
Meher Sudhakar Abbireddi
Verified
Yes
WPVDB ID
42c48c95-1384-4414-9236-64f44bea9027

Timeline

Publicly Published
2026-08-24 (about 3 days ago)
Added
2026-08-24 (about 2 days ago)
Last Updated
2026-08-24 (about 2 days ago)

Other

Published
Title
Published
2024-04-15
Title
WooCommerce Google Feed Manager < 2.6.0 - Authenticated (Admin+) SQL Injection to Reflected Cross-Site Scripting
Published
2008-01-30
Title
WassUp 1.4.3 - (spy.php to_date) SQL Injection Exploit
Published
2024-12-17
Title
WordPress Auction <= 3.7 - Editor+ SQL Injection
Published
2014-08-01
Title
Oqey Headers <= 0.3 - SQL Injection
Published
2024-07-22
Title
Best Restaurant Menu by PriceListo < 1.4.2 - Authenticated (Contributor+) SQL Injection