PT-2020-20135 · WordPress · Registrationmagic

Published 2020-03-12 · Updated 2022-01-21 · CVE-2020-8435

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions RegistrationMagic plugin version 4.6.0.0

Description An issue was discovered in the RegistrationMagic plugin for WordPress, where there is SQL injection via the rm analytics show form rm form id parameter.

Recommendations For RegistrationMagic plugin version 4.6.0.0, avoid using the rm form id parameter in the rm analytics show form until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-8435

Affected Products

Registrationmagic

References · 5

• 🔥 https://spider-security.co.uk/blog-cve-2020-8435 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-8435 · Security Note
• https://osv.dev/vulnerability/CVE-2020-8435 · Vendor Advisory
• https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers · Note
• https://spider-security.co.uk · Note