CVE-2026-110987: RegistrationMagic < 6.1.0.4 - Reflected XSS via 'rm_tr' and 'rm_ur' Parameters

Q: Who is exposed to this issue?

Sites using RegistrationMagic versions earlier than 6.1.0.4 are exposed, specifically when an administrator can be induced to open an attacker-crafted link targeting affected admin screens.

Q: Does an attacker need an account or prior access to exploit it?

No. The issue can be exploited by an unauthenticated attacker, but successful exploitation requires an administrator to open the crafted link.

Q: Which inputs are involved?

The affected user-controlled parameters are rm_tr and rm_ur. Their values can be printed without proper escaping inside an inline script block on several admin screens.

Q: How can I remediate the issue?

Update RegistrationMagic to version 6.1.0.4 or later. The vulnerability affects versions before 6.1.0.4.

Published Nov 15, 2026

Updated

The RegistrationMagic WordPress plugin before 6.1.0.4 does not properly escape a user-supplied value before printing it inside an inline script block on several of its admin screens, allowing unauthenticated attackers to inject arbitrary JavaScript that executes in the session of an administrator who is tricked into opening a crafted link.

Affected Software

1 affected component

RegistrationMagic RegistrationMagic<6.1.0.4

Event History

Nov 15, 2026

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

DescriptionWeakness

Data Sourced

via NVD·07:16 AM

Description

Frequently Asked Questions

Who is exposed to this issue?

Sites using RegistrationMagic versions earlier than 6.1.0.4 are exposed, specifically when an administrator can be induced to open an attacker-crafted link targeting affected admin screens.

Does an attacker need an account or prior access to exploit it?

No. The issue can be exploited by an unauthenticated attacker, but successful exploitation requires an administrator to open the crafted link.

Which inputs are involved?

The affected user-controlled parameters are rm_tr and rm_ur. Their values can be printed without proper escaping inside an inline script block on several admin screens.

How can I remediate the issue?

Update RegistrationMagic to version 6.1.0.4 or later. The vulnerability affects versions before 6.1.0.4.

CVE-2026-110987: RegistrationMagic < 6.1.0.4 - Reflected XSS via 'rm_tr' and 'rm_ur' Parameters

Affected Software

Event History

Frequently Asked Questions

Who is exposed to this issue?

Does an attacker need an account or prior access to exploit it?

Which inputs are involved?

How can I remediate the issue?

Company

Resources

Contact

Frequently Asked Questions

Who is exposed to this issue?

Does an attacker need an account or prior access to exploit it?

Which inputs are involved?

How can I remediate the issue?