https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T16:22:49.932096+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-77790 CVE-2026-77790 — RegistrationMagic < 6.0.9.4 - Admin+ SQLi via 'rm_sortby' Parameter 2026-09-28T16:22:49.933218+00:00

Affected: Unknown RegistrationMagic

The RegistrationMagic WordPress plugin before 6.0.9.4 does not sanitise and escape a parameter before using it in a SQL statement, which could allow high privilege users such as admin to perform SQL injection attacks.