Technical impact
The RegistrationMagic WordPress plugin fails to sanitize and escape the 'rm_fromdate' and 'rm_dateupto' parameters before including them in a database query. This omission permits a user with administrative privileges to inject arbitrary SQL statements. An attacker could exfiltrate sensitive data, modify database entries, or potentially gain full control over the site. The flaw demonstrates a classic input validation weakness that unmasks the database to privileged users.
Affected Systems
WordPress installations that use the RegistrationMagic plugin version earlier than 6.1.0.4 are vulnerable. All sites running the plugin in this range, regardless of host or configuration, should be considered at risk.
Risk and Exploitability
The vulnerability is exploitable by anyone able to authenticate as an administrator or another user with high‑level privileges. The CVSS score is not listed in the provided data, and the EPSS score is unavailable, but the lack of mitigation in the code indicates a high likelihood of exploitation in environments where attackers can obtain privileged accounts. The vulnerability is currently not catalogued in the CISA KEV list, though any site with admin access remains at risk.
