CVE-2021-24862

CVE-2021-24862 is an authenticated SQL injection vulnerability affecting the RegistrationMagic WordPress plugin prior to version 5.0.1.6. The flaw stems from improper sanitization of user input within the rm_chronos_ajax AJAX action when duplicating tasks. This vulnerability carries a CVSS score of 7.2 (High), indicating a high potential for impact (confidentiality, integrity, and availability) with low attack complexity, requiring high privileges for exploitation. While not listed on CISA's KEV catalog, exploit intelligence confirms the availability of public exploit code, including Metasploit modules and Nuclei templates, demonstrating active development of exploitation tools. There is no evidence of widespread community discussion or media coverage.