CVE-2021-24862

HIGH NUCLEI

Wordpress RegistrationMagic task_ids Authenticated SQLi

Title source: metasploit
STIX 2.1

Exploitation Summary

EIP tracks 2 public exploits for CVE-2021-24862. PoCs published by Ron Jost, h00die, Hacker5preme (Ron Jost), including Metasploit module auxiliary/scanner/http/wp_registrationmagic_sqli. A Nuclei detection template is also available.

AI-analyzed exploit summary This exploit demonstrates an authenticated SQL injection vulnerability in the WordPress RegistrationMagic plugin (CVE-2021-24862). It authenticates to WordPress, creates a task, and then uses sqlmap to exploit the SQL injection via the `rm_chronos_ajax` AJAX action.

Description

The RegistrationMagic WordPress plugin before 5.0.1.6 does not escape user input in its rm_chronos_ajax AJAX action before using it in a SQL statement when duplicating tasks in batches, which could lead to a SQL injection issue

Exploits (2)

exploitdb WORKING POC
by Ron Jost · pythonwebappsphp
https://www.exploit-db.com/exploits/50686

This exploit demonstrates an authenticated SQL injection vulnerability in the WordPress RegistrationMagic plugin (CVE-2021-24862). It authenticates to WordPress, creates a task, and then uses sqlmap to exploit the SQL injection via the `rm_chronos_ajax` AJAX action.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: WordPress Plugin RegistrationMagic <= 5.0.1.5
Auth required
Prerequisites: Valid WordPress credentials · RegistrationMagic plugin installed and activated · Network access to the target WordPress site
devstral-2 · analyzed Feb 16, 2026 Full analysis →
metasploit WORKING POC
by h00die, Hacker5preme (Ron Jost) · rubypoc
https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_registrationmagic_sqli.rb

This Metasploit module exploits an authenticated SQL injection vulnerability in the WordPress RegistrationMagic plugin (CVE-2021-24862) via the `task_ids` parameter. It performs time-based blind SQLi to dump user credentials from the `wp_users` table.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: WordPress RegistrationMagic plugin < 5.0.1.5
Auth required
Prerequisites: Valid WordPress credentials · RegistrationMagic plugin version < 5.0.1.5
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Nuclei Templates (1)

WordPress RegistrationMagic <5.0.1.6 - Authenticated SQL Injection
HIGHVERIFIEDby theamanrawat

References (3)

Core 3

Scores

CVSS v3 7.2
EPSS 0.7329
EPSS Percentile 99.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-89
Status published
Products (1)
metagauss/registrationmagic < 5.0.1.6
Published Jan 10, 2022
Tracked Since Feb 18, 2026