Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login 3.8.0.4

  • Severity: high-risk
  • Status: Fixed
  • Publication: December 10, 2017

The RegistrationMagic – Custom Registration Forms plugin for WordPress is not secure against malicious attacks in versions up to, and including, 3.8.0.4. This plugin is vulnerable to a type of attack called SQL Injection. Attackers can use this vulnerability to gain access to sensitive information stored in the WordPress database. This could be used to steal important data like passwords or credit card numbers.

Detected in:

Registration Forms by RegistrationMagic – Custom User Registration for WordPress fixed vulnerable versions:
RegistrationMagic – Custom Registration Forms, User Registration, Payment and User Login fixed vulnerable versions:
RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login fixed vulnerable versions: >= * <= 3.8.0.4
RegistrationMagic – Custom User Registration Forms fixed vulnerable versions:
RegistrationMagic – Custom User Registration Forms Plugin fixed vulnerable versions:
RegistrationMagic – Custom User Registration Forms, Payment Forms, and User Login fixed vulnerable versions:
RegistrationMagic – User Registration Plugin with Custom Registration Forms fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.