The RegistrationMagic plugin up to and including 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of the site via class_rm_user_services.php send_email_user_view.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
metagauss registrationmagic |