CVE-2021-24862

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

• CWE-89

• http://packetstormsecurity.com/files/165746/WordPress-RegistrationMagic-V-5.0.1.5-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2021-24862Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/7d3af3b5-5548-419d-aa32-1f7b51622615Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/165746/WordPress-RegistrationMagic-V-5.0.1.5-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2021-24862Exploit, Third Party Advisory
• https://wpscan.com/vulnerability/7d3af3b5-5548-419d-aa32-1f7b51622615Exploit, Third Party Advisory

Published

Jan 10, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-24856The Shared Files WordPress plugin before 1.6.61 does not san…4.8
• CVE-2021-24857The ToTop Link WordPress plugin through 1.7.1 passes base64 …9.8
• CVE-2021-24858The Cookie Notification Plugin for WordPress plugin before 1…7.2
• CVE-2021-24859The User Meta Shortcodes WordPress plugin through 0.5 regist…4.3
• CVE-2021-24860The BSK PDF Manager WordPress plugin before 3.1.2 does not v…7.2
• CVE-2021-24861The Quotes Collection WordPress plugin through 2.5.2 does no…7.2
• CVE-2021-24863The WP Block and Stop Bad Bots Crawlers and Spiders and Anti…9.8
• CVE-2021-24864The WP Cloudy, weather plugin WordPress plugin before 4.4.9 …8.8
• CVE-2021-24865The Advanced Custom Fields: Extended WordPress plugin before…7.2
• CVE-2021-24866The WP Data Access WordPress plugin before 5.0.0 does not pr…9.8
• CVE-2021-24867Numerous Plugins and Themes from the AccessPress Themes (aka…9.8
• CVE-2021-24868The Document Embedder WordPress plugin before 1.7.9 contains…4.3