What’s Vulnerable › Vulnerabilities

CVE-2020-8435

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-03-12 · updated 2026-06-17
• Weakness: CWE-89

Description

An issue was discovered in the RegistrationMagic plugin 4.6.0.0 for WordPress. There is SQL injection via the rm_analytics_show_form rm_form_id parameter.

Affected products

• Metagauss RegistrationMagic: 4.6.0.0

References

• https://Spider-security.co.uk
• https://spider-security.co.uk/blog-cve-2020-8435
• https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers
• https://Spider-security.co.uk
• https://spider-security.co.uk/blog-cve-2020-8435
• https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers

Get alerted when CVE-2020-8435 or the next vulnerability affects your stack