Vulnerability record/PUBLISHED/Published Nov 15, 2026 06:00:06 UTC
CVE-2026-110984
The RegistrationMagic WordPress plugin before 6.1.0.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.
Base scoreN/A/ 10
SeverityNoneCVSS unscored
Exploitability / impact
CVSS metric breakdown
Base severityNone
No CVSS vector is available for this record.
CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.
Record context
CVE Numbering AuthorityWPScan
Last updatedNov 15, 2026 06:00:06 UTC
PublishedNov 15, 2026 06:00:06 UTC
ReservedOct 15, 2026 11:31:06 UTC
Credits
- Dion Mulaj
- WPScan