cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score
CVE-2024-10508,https://securityvulnerability.io/vulnerability/CVE-2024-10508,Unauthenticated Attackers Can Escalate Privileges via Plugin Flaw,"The RegistrationMagic User Registration Plugin for WordPress is susceptible to a serious vulnerability that allows unauthenticated attackers to escalate privileges via account takeover. This issue stems from the plugin's inadequate validation of password reset tokens prior to allowing updates to user passwords. As a result, attackers can reset passwords for arbitrary users, including those with administrative privileges, and gain unauthorized access to sensitive accounts. The vulnerability exists in all versions up to and including 6.0.2.6, necessitating immediate attention and patching to mitigate risks associated with potential exploitation.",Wordpress,Registrationmagic – User Registration Plugin With Custom Registration Forms,9.8,CRITICAL,0.00044999999227002263,false,,false,false,false,,false,false,2024-11-09T07:35:07.908Z,0
CVE-2022-0420,https://securityvulnerability.io/vulnerability/CVE-2022-0420,RegistrationMagic < 5.0.2.2 - Admin+ SQL Injection,"The RegistrationMagic WordPress plugin before 5.0.2.2 does not sanitise and escape the rm_form_id parameter before using it in a SQL statement in the Automation admin dashboard, allowing high privilege users to perform SQL injection attacks",Wordpress,"Registrationmagic – Custom Registration Forms, User Registration And User Login Plugin",7.2,HIGH,0.00139999995008111,false,,false,false,false,,false,false,2022-03-07T08:16:33.000Z,0
CVE-2021-24862,https://securityvulnerability.io/vulnerability/CVE-2021-24862,RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection,"The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue",Wordpress,"Registrationmagic – Custom Registration Forms, User Registration And User Login Plugin",7.2,HIGH,0.9577599763870239,false,,false,false,false,,false,false,2022-01-10T15:30:30.000Z,0