Blind SQL Injection Vulnerability in RegistrationMagic Plugin for WordPress
CVE-2024-1990

8.8HIGH

Key Information:

Vendor
Wordpress
Status
Registrationmagic – Custom Registration Forms, User Registration, Payment, And User Login
Vendor
CVE Published:
9 April 2024

Summary

The RegistrationMagic plugin for WordPress is susceptible to blind SQL injection vulnerabilities through the 'id' parameter of the RM_Form shortcode. This vulnerability arises from inadequate escaping of user-supplied input and insufficient preparation of SQL queries. As a result, authenticated attackers with contributor-level access or higher can insert malicious SQL queries into the existing database queries. The exploitation of this vulnerability could allow unauthorized access to sensitive data stored in the database, posing significant security risks for websites utilizing this plugin.

Affected Version(s)

RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login * <= 5.3.1.0

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/changeset/3057216/cust...
https://plugins.trac.wordpress.org/changeset/3049490/cust...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Krzysztof Zając
.