Vulnerabilities > CVE-2020-9456 - Missing Authorization vulnerability in Metagauss Registrationmagic

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

metagauss

CWE-862

NVD

Published: 2020-03-06

Updated: 2022-01-21

Summary

In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_rm_user_controller.php rm_user_edit.

Vulnerable Configurations

Part	Description	Count
Application	Metagauss Metagauss Registrationmagic - Metagauss Registrationmagic 1.0 Metagauss Registrationmagic 1.1 Metagauss Registrationmagic 1.1.1 Metagauss Registrationmagic 1.2 Metagauss Registrationmagic 1.3 Metagauss Registrationmagic 1.3.2 Metagauss Registrationmagic 1.3.3 Metagauss Registrationmagic 1.3.4 Metagauss Registrationmagic 1.3.5 Metagauss Registrationmagic 1.3.6 Metagauss Registrationmagic 1.3.7 Metagauss Registrationmagic 1.3.8 Metagauss Registrationmagic 1.3.9 Metagauss Registrationmagic 1.3.10 Metagauss Registrationmagic 1.3.11 Metagauss Registrationmagic 1.3.12 Metagauss Registrationmagic 1.3.13 Metagauss Registrationmagic 1.3.14 Metagauss Registrationmagic 1.3.15 Metagauss Registrationmagic 1.3.16 Metagauss Registrationmagic 1.3.17 Metagauss Registrationmagic 1.3.18 Metagauss Registrationmagic 1.3.19 Metagauss Registrationmagic 1.3.21 Metagauss Registrationmagic 1.3.23 Metagauss Registrationmagic 1.4 Metagauss Registrationmagic 1.4.1 Metagauss Registrationmagic 1.4.2 Metagauss Registrationmagic 1.5 Metagauss Registrationmagic 1.5.1 Metagauss Registrationmagic 2.0 Metagauss Registrationmagic 2.0.1 Metagauss Registrationmagic 2.0.2 Metagauss Registrationmagic 2.2 Metagauss Registrationmagic 2.2.1 Metagauss Registrationmagic 2.2.2 Metagauss Registrationmagic 2.5 Metagauss Registrationmagic 2.5.1 Metagauss Registrationmagic 2.5.2 Metagauss Registrationmagic 2.5.3 Metagauss Registrationmagic 2.5.4 Metagauss Registrationmagic 3.0 Metagauss Registrationmagic 3.0.1 Metagauss Registrationmagic 3.0.2 Metagauss Registrationmagic 3.1.0 Metagauss Registrationmagic 3.1.1 Metagauss Registrationmagic 3.1.2 Metagauss Registrationmagic 3.1.4 Metagauss Registrationmagic 3.1.5 Metagauss Registrationmagic 3.1.7 Metagauss Registrationmagic 3.1.7.2 Metagauss Registrationmagic 3.1.7.3 Metagauss Registrationmagic 3.1.7.4 Metagauss Registrationmagic 3.5 Metagauss Registrationmagic 3.5.0.1 Metagauss Registrationmagic 3.5.0.2 Metagauss Registrationmagic 3.5.0.3 Metagauss Registrationmagic 3.5.0.4 Metagauss Registrationmagic 3.5.1 Metagauss Registrationmagic 3.5.1.1 Metagauss Registrationmagic 3.5.1.2 Metagauss Registrationmagic 3.5.1.3 Metagauss Registrationmagic 3.5.1.31 Metagauss Registrationmagic 3.5.2 Metagauss Registrationmagic 3.5.2.1 Metagauss Registrationmagic 3.5.2.2 Metagauss Registrationmagic 3.5.2.3 Metagauss Registrationmagic 3.5.3 Metagauss Registrationmagic 3.5.3.1 Metagauss Registrationmagic 3.5.3.2 Metagauss Registrationmagic 3.5.3.3 Metagauss Registrationmagic 3.5.4 Metagauss Registrationmagic 3.5.4.1 Metagauss Registrationmagic 3.5.4.2 Metagauss Registrationmagic 3.6.0.0 Metagauss Registrationmagic 3.6.0.1 Metagauss Registrationmagic 3.6.0.2 Metagauss Registrationmagic 3.6.0.3 Metagauss Registrationmagic 3.6.0.4 Metagauss Registrationmagic 3.6.0.5 Metagauss Registrationmagic 3.6.0.6 Metagauss Registrationmagic 3.6.0.7 Metagauss Registrationmagic 3.6.0.8 Metagauss Registrationmagic 3.6.0.9 Metagauss Registrationmagic 3.6.1.0 Metagauss Registrationmagic 3.6.1.1 Metagauss Registrationmagic 3.6.1.2 Metagauss Registrationmagic 3.6.1.3 Metagauss Registrationmagic 3.7.0.0 Metagauss Registrationmagic 3.7.1.0 Metagauss Registrationmagic 3.7.1.1 Metagauss Registrationmagic 3.7.1.2 Metagauss Registrationmagic 3.7.1.3 Metagauss Registrationmagic 3.7.1.4 Metagauss Registrationmagic 3.7.2.0 Metagauss Registrationmagic 3.7.2.1 Metagauss Registrationmagic 3.7.2.2 Metagauss Registrationmagic 3.7.2.3 Metagauss Registrationmagic 3.7.2.4 Metagauss Registrationmagic 3.7.2.5 Metagauss Registrationmagic 3.7.2.6 Metagauss Registrationmagic 3.7.2.7 Metagauss Registrationmagic 3.7.2.8 Metagauss Registrationmagic 3.7.2.9 Metagauss Registrationmagic 3.7.3.0 Metagauss Registrationmagic 3.7.5.0 Metagauss Registrationmagic 3.7.5.1 Metagauss Registrationmagic 3.7.5.2 Metagauss Registrationmagic 3.7.5.3 Metagauss Registrationmagic 3.7.5.4 Metagauss Registrationmagic 3.7.5.5 Metagauss Registrationmagic 3.7.5.6 Metagauss Registrationmagic 3.7.5.7 Metagauss Registrationmagic 3.7.5.8 Metagauss Registrationmagic 3.7.5.9 Metagauss Registrationmagic 3.7.6.0 Metagauss Registrationmagic 3.7.6.2 Metagauss Registrationmagic 3.7.6.3 Metagauss Registrationmagic 3.7.7.0 Metagauss Registrationmagic 3.7.7.1 Metagauss Registrationmagic 3.7.7.3 Metagauss Registrationmagic 3.7.7.5 Metagauss Registrationmagic 3.7.7.6 Metagauss Registrationmagic 3.7.7.7 Metagauss Registrationmagic 3.7.8.0 Metagauss Registrationmagic 3.7.8.1 Metagauss Registrationmagic 3.7.8.2 Metagauss Registrationmagic 3.7.8.5 Metagauss Registrationmagic 3.7.8.6 Metagauss Registrationmagic 3.7.8.7 Metagauss Registrationmagic 3.7.8.8 Metagauss Registrationmagic 3.7.8.9 Metagauss Registrationmagic 3.7.9.0 Metagauss Registrationmagic 3.7.9.1 Metagauss Registrationmagic 3.7.9.2 Metagauss Registrationmagic 3.7.9.3 Metagauss Registrationmagic 3.7.9.4 Metagauss Registrationmagic 3.7.9.5 Metagauss Registrationmagic 3.7.9.6 Metagauss Registrationmagic 3.7.9.7 Metagauss Registrationmagic 3.7.9.8 Metagauss Registrationmagic 3.7.9.9 Metagauss Registrationmagic 3.8.0.0 Metagauss Registrationmagic 3.8.0.1 Metagauss Registrationmagic 3.8.0.2 Metagauss Registrationmagic 3.8.0.3 Metagauss Registrationmagic 3.8.0.4 Metagauss Registrationmagic 3.8.0.9 Metagauss Registrationmagic 3.8.1.0 Metagauss Registrationmagic 3.8.1.1 Metagauss Registrationmagic 3.8.1.2 Metagauss Registrationmagic 3.8.1.3 Metagauss Registrationmagic 3.8.1.4 Metagauss Registrationmagic 3.8.1.5 Metagauss Registrationmagic 3.8.1.6 Metagauss Registrationmagic 3.8.1.7 Metagauss Registrationmagic 3.8.1.8 Metagauss Registrationmagic 3.8.1.9 Metagauss Registrationmagic 3.8.2.0 Metagauss Registrationmagic 3.8.2.2 Metagauss Registrationmagic 3.8.2.3 Metagauss Registrationmagic 3.8.2.4 Metagauss Registrationmagic 3.8.2.5 Metagauss Registrationmagic 3.8.2.6 Metagauss Registrationmagic 3.8.3.0 Metagauss Registrationmagic 3.8.3.1 Metagauss Registrationmagic 3.8.3.2 Metagauss Registrationmagic 3.8.3.3 Metagauss Registrationmagic 3.8.3.4 Metagauss Registrationmagic 3.8.3.6 Metagauss Registrationmagic 3.8.3.7 Metagauss Registrationmagic 3.8.3.8 Metagauss Registrationmagic 3.8.3.9 Metagauss Registrationmagic 3.8.4.0 Metagauss Registrationmagic 4.0.0.0 Metagauss Registrationmagic 4.0.1.0 Metagauss Registrationmagic 4.1.1.0 Metagauss Registrationmagic 4.1.2.0 Metagauss Registrationmagic 4.1.3.0 Metagauss Registrationmagic 4.2.1.0 Metagauss Registrationmagic 4.3.0.0 Metagauss Registrationmagic 4.3.0.1 Metagauss Registrationmagic 4.3.1.0 Metagauss Registrationmagic 4.3.1.1 Metagauss Registrationmagic 4.3.1.2 Metagauss Registrationmagic 4.3.2.0 Metagauss Registrationmagic 4.3.2.1 Metagauss Registrationmagic 4.3.2.2 Metagauss Registrationmagic 4.3.2.3 Metagauss Registrationmagic 4.3.2.4 Metagauss Registrationmagic 4.3.2.5 Metagauss Registrationmagic 4.3.2.6 Metagauss Registrationmagic 4.4.0.0 Metagauss Registrationmagic 4.4.0.1 Metagauss Registrationmagic 4.4.0.2 Metagauss Registrationmagic 4.5.0.0 Metagauss Registrationmagic 4.5.1.0 Metagauss Registrationmagic 4.5.1.1 Metagauss Registrationmagic 4.5.1.2 Metagauss Registrationmagic 4.5.2.0 Metagauss Registrationmagic 4.5.2.1 Metagauss Registrationmagic 4.5.2.2 Metagauss Registrationmagic 4.5.4.0 Metagauss Registrationmagic 4.5.4.1 Metagauss Registrationmagic 4.5.5.0 Metagauss Registrationmagic 4.5.6.0 Metagauss Registrationmagic 4.5.6.1 Metagauss Registrationmagic 4.5.6.2 Metagauss Registrationmagic 4.5.6.3 Metagauss Registrationmagic 4.5.6.4 Metagauss Registrationmagic 4.5.6.5 Metagauss Registrationmagic 4.5.7.0 Metagauss Registrationmagic 4.5.7.1 Metagauss Registrationmagic 4.5.7.2 Metagauss Registrationmagic 4.5.7.3 Metagauss Registrationmagic 4.5.7.4 Metagauss Registrationmagic 4.5.7.5 Metagauss Registrationmagic 4.5.8.0 Metagauss Registrationmagic 4.5.8.1 Metagauss Registrationmagic 4.5.8.2 Metagauss Registrationmagic 4.5.8.3 Metagauss Registrationmagic 4.5.9.0 Metagauss Registrationmagic 4.5.9.1 Metagauss Registrationmagic 4.5.9.2 Metagauss Registrationmagic 4.5.9.3 Metagauss Registrationmagic 4.6.0.0 Metagauss Registrationmagic 4.6.0.1 Metagauss Registrationmagic 4.6.0.3	229

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References