The RegistrationMagic plugin up to and including 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and change form settings via class_rm_form_settings_controller.php, resulting in privilege escalation.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
metagauss registrationmagic |