CVE-2020-9457

CVE-2020-9457 affects the WordPress plugin RegistrationMagic up to version 4.6.0.3. A remote authenticated user with minimal privileges can exploit via the file class_rm_form_settings_controller.php to import vulnerable custom forms and modify form settings, resulting in privilege escalation (adm...