2 matches found
CVE-2020-9456
In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users with minimal privileges to elevate their privileges to administrator via classrmusercontroller.php rmuseredit...
8.8CVSS0.02511EPSS
SaveExploits1References3
CVE-2020-9456: Missing Authorization
In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users with minimal privileges to elevate their privileges to administrator via classrmusercontroller.php rmuseredit...
8.8CVSS7.8AI score0.02511EPSS
SaveExploits1References2
20