Vulnerabilities > CVE-2020-9456 - Missing Authorization vulnerability in Metagauss Registrationmagic

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

metagauss

CWE-862

NVD

Published: 2020-03-06

Updated: 2022-01-21

Summary

In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_rm_user_controller.php rm_user_edit.

Vulnerable Configurations

Part	Description	Count
Application	Metagauss Metagauss Registrationmagic - Metagauss Registrationmagic 1.0 Metagauss Registrationmagic 1.1 Metagauss Registrationmagic 1.1.1 Metagauss Registrationmagic 1.2 Metagauss Registrationmagic 1.3 Metagauss Registrationmagic 1.3.2 Metagauss Registrationmagic 1.3.3 Metagauss Registrationmagic 1.3.4 Metagauss Registrationmagic 1.3.5 Metagauss Registrationmagic 1.3.6 Metagauss Registrationmagic 1.3.7 Metagauss Registrationmagic 1.3.8 Metagauss Registrationmagic 1.3.9 Metagauss Registrationmagic 1.3.10 Metagauss Registrationmagic 1.3.11 Metagauss Registrationmagic 1.3.12 Metagauss Registrationmagic 1.3.13 Metagauss Registrationmagic 1.3.14 Metagauss Registrationmagic 1.3.15 Metagauss Registrationmagic 1.3.16 Metagauss Registrationmagic 1.3.17 Metagauss Registrationmagic 1.3.18 Metagauss Registrationmagic 1.3.19 Metagauss Registrationmagic 1.3.21 Metagauss Registrationmagic 1.3.23 Metagauss Registrationmagic 1.4 Metagauss Registrationmagic 1.4.1 Metagauss Registrationmagic 1.4.2 Metagauss Registrationmagic 1.5 Metagauss Registrationmagic 1.5.1 Metagauss Registrationmagic 2.0 Metagauss Registrationmagic 2.0.1 Metagauss Registrationmagic 2.0.2 Metagauss Registrationmagic 2.2 Metagauss Registrationmagic 2.2.1 Metagauss Registrationmagic 2.2.2 Metagauss Registrationmagic 2.5 Metagauss Registrationmagic 2.5.1 Metagauss Registrationmagic 2.5.2 Metagauss Registrationmagic 2.5.3 Metagauss Registrationmagic 2.5.4 Metagauss Registrationmagic 3.0 Metagauss Registrationmagic 3.0.1 Metagauss Registrationmagic 3.0.2 Metagauss Registrationmagic 3.1.0 Metagauss Registrationmagic 3.1.1 Metagauss Registrationmagic 3.1.2 Metagauss Registrationmagic 3.1.4 Metagauss Registrationmagic 3.1.5 Metagauss Registrationmagic 3.1.7 Metagauss Registrationmagic 3.1.7.2 Metagauss Registrationmagic 3.1.7.3 Metagauss Registrationmagic 3.1.7.4 Metagauss Registrationmagic 3.5 Metagauss Registrationmagic 3.5.0.1 Metagauss Registrationmagic 3.5.0.2 Metagauss Registrationmagic 3.5.0.3 Metagauss Registrationmagic 3.5.0.4 Metagauss Registrationmagic 3.5.1 Metagauss Registrationmagic 3.5.1.1 Metagauss Registrationmagic 3.5.1.2 Metagauss Registrationmagic 3.5.1.3 Metagauss Registrationmagic 3.5.1.31 Metagauss Registrationmagic 3.5.2 Metagauss Registrationmagic 3.5.2.1 Metagauss Registrationmagic 3.5.2.2 Metagauss Registrationmagic 3.5.2.3 Metagauss Registrationmagic 3.5.3 Metagauss Registrationmagic 3.5.3.1 Metagauss Registrationmagic 3.5.3.2 Metagauss Registrationmagic 3.5.3.3 Metagauss Registrationmagic 3.5.4 Metagauss Registrationmagic 3.5.4.1 Metagauss Registrationmagic 3.5.4.2 Metagauss Registrationmagic 3.6.0.0 Metagauss Registrationmagic 3.6.0.1 Metagauss Registrationmagic 3.6.0.2 Metagauss Registrationmagic 3.6.0.3 Metagauss Registrationmagic 3.6.0.4 Metagauss Registrationmagic 3.6.0.5 Metagauss Registrationmagic 3.6.0.6 Metagauss Registrationmagic 3.6.0.7 Metagauss Registrationmagic 3.6.0.8 Metagauss Registrationmagic 3.6.0.9 Metagauss Registrationmagic 3.6.1.0 Metagauss Registrationmagic 3.6.1.1 Metagauss Registrationmagic 3.6.1.2 Metagauss Registrationmagic 3.6.1.3 Metagauss Registrationmagic 3.7.0.0 Metagauss Registrationmagic 3.7.1.0 Metagauss Registrationmagic 3.7.1.1 Metagauss Registrationmagic 3.7.1.2 Metagauss Registrationmagic 3.7.1.3 Metagauss Registrationmagic 3.7.1.4 Metagauss Registrationmagic 3.7.2.0 Metagauss Registrationmagic 3.7.2.1 Metagauss Registrationmagic 3.7.2.2 Metagauss Registrationmagic 3.7.2.3 Metagauss Registrationmagic 3.7.2.4 Metagauss Registrationmagic 3.7.2.5 Metagauss Registrationmagic 3.7.2.6 Metagauss Registrationmagic 3.7.2.7 Metagauss Registrationmagic 3.7.2.8 Metagauss Registrationmagic 3.7.2.9 Metagauss Registrationmagic 3.7.3.0 Metagauss Registrationmagic 3.7.5.0 Metagauss Registrationmagic 3.7.5.1 Metagauss Registrationmagic 3.7.5.2 Metagauss Registrationmagic 3.7.5.3 Metagauss Registrationmagic 3.7.5.4 Metagauss Registrationmagic 3.7.5.5 Metagauss Registrationmagic 3.7.5.6 Metagauss Registrationmagic 3.7.5.7 Metagauss Registrationmagic 3.7.5.8 Metagauss Registrationmagic 3.7.5.9 Metagauss Registrationmagic 3.7.6.0 Metagauss Registrationmagic 3.7.6.2 Metagauss Registrationmagic 3.7.6.3 Metagauss Registrationmagic 3.7.7.0 Metagauss Registrationmagic 3.7.7.1 Metagauss Registrationmagic 3.7.7.3 Metagauss Registrationmagic 3.7.7.5 Metagauss Registrationmagic 3.7.7.6 Metagauss Registrationmagic 3.7.7.7 Metagauss Registrationmagic 3.7.8.0 Metagauss Registrationmagic 3.7.8.1 Metagauss Registrationmagic 3.7.8.2 Metagauss Registrationmagic 3.7.8.5 Metagauss Registrationmagic 3.7.8.6 Metagauss Registrationmagic 3.7.8.7 Metagauss Registrationmagic 3.7.8.8 Metagauss Registrationmagic 3.7.8.9 Metagauss Registrationmagic 3.7.9.0 Metagauss Registrationmagic 3.7.9.1 Metagauss Registrationmagic 3.7.9.2 Metagauss Registrationmagic 3.7.9.3 Metagauss Registrationmagic 3.7.9.4 Metagauss Registrationmagic 3.7.9.5 Metagauss Registrationmagic 3.7.9.6 Metagauss Registrationmagic 3.7.9.7 Metagauss Registrationmagic 3.7.9.8 Metagauss Registrationmagic 3.7.9.9 Metagauss Registrationmagic 3.8.0.0 Metagauss Registrationmagic 3.8.0.1 Metagauss Registrationmagic 3.8.0.2 Metagauss Registrationmagic 3.8.0.3 Metagauss Registrationmagic 3.8.0.4 Metagauss Registrationmagic 3.8.0.9 Metagauss Registrationmagic 3.8.1.0 Metagauss Registrationmagic 3.8.1.1 Metagauss Registrationmagic 3.8.1.2 Metagauss Registrationmagic 3.8.1.3 Metagauss Registrationmagic 3.8.1.4 Metagauss Registrationmagic 3.8.1.5 Metagauss Registrationmagic 3.8.1.6 Metagauss Registrationmagic 3.8.1.7 Metagauss Registrationmagic 3.8.1.8 Metagauss Registrationmagic 3.8.1.9 Metagauss Registrationmagic 3.8.2.0 Metagauss Registrationmagic 3.8.2.2 Metagauss Registrationmagic 3.8.2.3 Metagauss Registrationmagic 3.8.2.4 Metagauss Registrationmagic 3.8.2.5 Metagauss Registrationmagic 3.8.2.6 Metagauss Registrationmagic 3.8.3.0 Metagauss Registrationmagic 3.8.3.1 Metagauss Registrationmagic 3.8.3.2 Metagauss Registrationmagic 3.8.3.3 Metagauss Registrationmagic 3.8.3.4 Metagauss Registrationmagic 3.8.3.6 Metagauss Registrationmagic 3.8.3.7 Metagauss Registrationmagic 3.8.3.8 Metagauss Registrationmagic 3.8.3.9 Metagauss Registrationmagic 3.8.4.0 Metagauss Registrationmagic 4.0.0.0 Metagauss Registrationmagic 4.0.1.0 Metagauss Registrationmagic 4.1.1.0 Metagauss Registrationmagic 4.1.2.0 Metagauss Registrationmagic 4.1.3.0 Metagauss Registrationmagic 4.2.1.0 Metagauss Registrationmagic 4.3.0.0 Metagauss Registrationmagic 4.3.0.1 Metagauss Registrationmagic 4.3.1.0 Metagauss Registrationmagic 4.3.1.1 Metagauss Registrationmagic 4.3.1.2 Metagauss Registrationmagic 4.3.2.0 Metagauss Registrationmagic 4.3.2.1 Metagauss Registrationmagic 4.3.2.2 Metagauss Registrationmagic 4.3.2.3 Metagauss Registrationmagic 4.3.2.4 Metagauss Registrationmagic 4.3.2.5 Metagauss Registrationmagic 4.3.2.6 Metagauss Registrationmagic 4.4.0.0 Metagauss Registrationmagic 4.4.0.1 Metagauss Registrationmagic 4.4.0.2 Metagauss Registrationmagic 4.5.0.0 Metagauss Registrationmagic 4.5.1.0 Metagauss Registrationmagic 4.5.1.1 Metagauss Registrationmagic 4.5.1.2 Metagauss Registrationmagic 4.5.2.0 Metagauss Registrationmagic 4.5.2.1 Metagauss Registrationmagic 4.5.2.2 Metagauss Registrationmagic 4.5.4.0 Metagauss Registrationmagic 4.5.4.1 Metagauss Registrationmagic 4.5.5.0 Metagauss Registrationmagic 4.5.6.0 Metagauss Registrationmagic 4.5.6.1 Metagauss Registrationmagic 4.5.6.2 Metagauss Registrationmagic 4.5.6.3 Metagauss Registrationmagic 4.5.6.4 Metagauss Registrationmagic 4.5.6.5 Metagauss Registrationmagic 4.5.7.0 Metagauss Registrationmagic 4.5.7.1 Metagauss Registrationmagic 4.5.7.2 Metagauss Registrationmagic 4.5.7.3 Metagauss Registrationmagic 4.5.7.4 Metagauss Registrationmagic 4.5.7.5 Metagauss Registrationmagic 4.5.8.0 Metagauss Registrationmagic 4.5.8.1 Metagauss Registrationmagic 4.5.8.2 Metagauss Registrationmagic 4.5.8.3 Metagauss Registrationmagic 4.5.9.0 Metagauss Registrationmagic 4.5.9.1 Metagauss Registrationmagic 4.5.9.2 Metagauss Registrationmagic 4.5.9.3 Metagauss Registrationmagic 4.6.0.0 Metagauss Registrationmagic 4.6.0.1 Metagauss Registrationmagic 4.6.0.3	229

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References