CVE-2020-8435 - An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress

Back Back to CVE browser

HIGH

An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress

Published Mar 12, 2020

8.1

HIGH

CVSS 3.1

EPSS 1.92%

Description

An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rm_analytics_show_form rm_form_id parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://Spider-security.co.uk
x_refsource_MISCThird Party Advisory
https://spider-security.co.uk/blog-cve-2020-8435
x_refsource_MISCExploitThird Party Advisory
https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers
x_refsource_MISCRelease Notes

Link	Providers	Tags
https://Spider-security.co.uk		x_refsource_MISCThird Party Advisory
https://spider-security.co.uk/blog-cve-2020-8435		x_refsource_MISCExploitThird Party Advisory
https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers		x_refsource_MISCRelease Notes

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 12, 2020

Updated Aug 4, 2024

Reserved Jan 29, 2020

Link CVE-2020-8435

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8435

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8435