Published: 06/03/2020 Updated: 21/11/2024

A CSRF vulnerability in the RegistrationMagic plugin up to and including 4.6.0.3 for WordPress allows remote malicious users to forge requests on behalf of a site administrator to change all settings for the plugin, including deleting users, creating new roles with escalated privileges, and allowing PHP file uploads via forms.

Vulnerable Product	Search on Vulmon	Subscribe to Product
metagauss registrationmagic

CWE-352 https://nvd.nist.gov https://www.first.org/epss https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers https://wpvulndb.com/vulnerabilities/10116 https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers https://wpvulndb.com/vulnerabilities/10116 https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-9454

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect