Input validation vulnerability in RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login 5.2.4.6

The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress has a security issue in all versions up to and including 5.2.4.5. This issue allows an attacker, with administrator access or higher, to extract sensitive information from the database. This is done by taking advantage of insufficient escaping on user supplied parameters and lack of sufficient preparation on the existing SQL query.