CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110987
UNKNOWNCVSS 0NVD feed
Published 15 November 2026 · tracked since 15 November 2026
Description
The RegistrationMagic WordPress plugin before 6.1.0.4 does not properly escape a user-supplied value before printing it inside an inline script block on several of its admin screens, allowing unauthenticated attackers to inject arbitrary JavaScript that executes in the session of an administrator w
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog