CVE-2021-24862

RegistrationMagic < 5.0.1.6 - Admin+ SQL Injection

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

Affected

RegistrationMagic – Custom Registration Forms, User Registration and User Login Plugin

CVSS v3.1 NVD

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

73.29% chance of exploitation in the next 30 days, 99th percentile

Nuclei

high · CWE-89

Published

2022-01-10

Updated

2024-08-03

Proof-of-concept exploits (2)

• http://packetstormsecurity.com/files/165746/WordPress-RegistrationMagic-V-5.0.1.5-SQL-Inj…
• https://wpscan.com/vulnerability/7d3af3b5-5548-419d-aa32-1f7b51622615

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24862.yaml

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_registrationmag…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/50686

Security advisories

• Hacker5preme/Exploits/tree/main/Wordpress/CVE-2021-24862

References

• CVE Record
• NVD entry