Security Advisory

CVE-2026-77790

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-26 06:00:22
Last updated 2026-09-03 15:50:11
Assigner WPScan
CVSS score 5.5
State PUBLISHED

Description

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.