high8.8
CVE-2020-9457
The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and ch…
Impact
The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and change form settings via class_rm_form_settings_controller.php, resulting in privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Metagauss | Registrationmagic | through 4.6.0.3 |
Weakness classification
References
- NVD record
- CVE.org record
- https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers
- https://wpvulndb.com/vulnerabilities/10116
- https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/
- https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers
- https://wpvulndb.com/vulnerabilities/10116
- https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/