CVE-2020-9454

2020-03-0618:43:13

mitre

www.cve.org

AI Score

8.8

Confidence

High

EPSS

0.013

Percentile

86.0%

JSON

A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, including deleting users, creating new roles with escalated privileges, and allowing PHP file uploads via forms.