CVE-2026-77790

The RegistrationMagic plugin for WordPress, prior to version 6.0.9.4, is vulnerable due to inadequate sanitization and escaping of parameters in SQL statements, potentially allowing high-privilege users, such as administrators, to execute SQL injection attacks. This vulnerability could lead to unauthorized access to sensitive data or manipulation of the database. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk.