Vulnerabilities > CVE-2020-9457 - Missing Authorization vulnerability in Metagauss Registrationmagic

CVSS 6.5 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

SINGLE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

metagauss

CWE-862

NVD

Published: 2020-03-06

Updated: 2022-01-21

Summary

The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and change form settings via class_rm_form_settings_controller.php, resulting in privilege escalation.

Vulnerable Configurations

Part	Description	Count
Application	Metagauss Metagauss Registrationmagic - Metagauss Registrationmagic 1.0 Metagauss Registrationmagic 1.1 Metagauss Registrationmagic 1.1.1 Metagauss Registrationmagic 1.2 Metagauss Registrationmagic 1.3 Metagauss Registrationmagic 1.3.2 Metagauss Registrationmagic 1.3.3 Metagauss Registrationmagic 1.3.4 Metagauss Registrationmagic 1.3.5 Metagauss Registrationmagic 1.3.6 Metagauss Registrationmagic 1.3.7 Metagauss Registrationmagic 1.3.8 Metagauss Registrationmagic 1.3.9 Metagauss Registrationmagic 1.3.10 Metagauss Registrationmagic 1.3.11 Metagauss Registrationmagic 1.3.12 Metagauss Registrationmagic 1.3.13 Metagauss Registrationmagic 1.3.14 Metagauss Registrationmagic 1.3.15 Metagauss Registrationmagic 1.3.16 Metagauss Registrationmagic 1.3.17 Metagauss Registrationmagic 1.3.18 Metagauss Registrationmagic 1.3.19 Metagauss Registrationmagic 1.3.21 Metagauss Registrationmagic 1.3.23 Metagauss Registrationmagic 1.4 Metagauss Registrationmagic 1.4.1 Metagauss Registrationmagic 1.4.2 Metagauss Registrationmagic 1.5 Metagauss Registrationmagic 1.5.1 Metagauss Registrationmagic 2.0 Metagauss Registrationmagic 2.0.1 Metagauss Registrationmagic 2.0.2 Metagauss Registrationmagic 2.2 Metagauss Registrationmagic 2.2.1 Metagauss Registrationmagic 2.2.2 Metagauss Registrationmagic 2.5 Metagauss Registrationmagic 2.5.1 Metagauss Registrationmagic 2.5.2 Metagauss Registrationmagic 2.5.3 Metagauss Registrationmagic 2.5.4 Metagauss Registrationmagic 3.0 Metagauss Registrationmagic 3.0.1 Metagauss Registrationmagic 3.0.2 Metagauss Registrationmagic 3.1.0 Metagauss Registrationmagic 3.1.1 Metagauss Registrationmagic 3.1.2 Metagauss Registrationmagic 3.1.4 Metagauss Registrationmagic 3.1.5 Metagauss Registrationmagic 3.1.7 Metagauss Registrationmagic 3.1.7.2 Metagauss Registrationmagic 3.1.7.3 Metagauss Registrationmagic 3.1.7.4 Metagauss Registrationmagic 3.5 Metagauss Registrationmagic 3.5.0.1 Metagauss Registrationmagic 3.5.0.2 Metagauss Registrationmagic 3.5.0.3 Metagauss Registrationmagic 3.5.0.4 Metagauss Registrationmagic 3.5.1 Metagauss Registrationmagic 3.5.1.1 Metagauss Registrationmagic 3.5.1.2 Metagauss Registrationmagic 3.5.1.3 Metagauss Registrationmagic 3.5.1.31 Metagauss Registrationmagic 3.5.2 Metagauss Registrationmagic 3.5.2.1 Metagauss Registrationmagic 3.5.2.2 Metagauss Registrationmagic 3.5.2.3 Metagauss Registrationmagic 3.5.3 Metagauss Registrationmagic 3.5.3.1 Metagauss Registrationmagic 3.5.3.2 Metagauss Registrationmagic 3.5.3.3 Metagauss Registrationmagic 3.5.4 Metagauss Registrationmagic 3.5.4.1 Metagauss Registrationmagic 3.5.4.2 Metagauss Registrationmagic 3.6.0.0 Metagauss Registrationmagic 3.6.0.1 Metagauss Registrationmagic 3.6.0.2 Metagauss Registrationmagic 3.6.0.3 Metagauss Registrationmagic 3.6.0.4 Metagauss Registrationmagic 3.6.0.5 Metagauss Registrationmagic 3.6.0.6 Metagauss Registrationmagic 3.6.0.7 Metagauss Registrationmagic 3.6.0.8 Metagauss Registrationmagic 3.6.0.9 Metagauss Registrationmagic 3.6.1.0 Metagauss Registrationmagic 3.6.1.1 Metagauss Registrationmagic 3.6.1.2 Metagauss Registrationmagic 3.6.1.3 Metagauss Registrationmagic 3.7.0.0 Metagauss Registrationmagic 3.7.1.0 Metagauss Registrationmagic 3.7.1.1 Metagauss Registrationmagic 3.7.1.2 Metagauss Registrationmagic 3.7.1.3 Metagauss Registrationmagic 3.7.1.4 Metagauss Registrationmagic 3.7.2.0 Metagauss Registrationmagic 3.7.2.1 Metagauss Registrationmagic 3.7.2.2 Metagauss Registrationmagic 3.7.2.3 Metagauss Registrationmagic 3.7.2.4 Metagauss Registrationmagic 3.7.2.5 Metagauss Registrationmagic 3.7.2.6 Metagauss Registrationmagic 3.7.2.7 Metagauss Registrationmagic 3.7.2.8 Metagauss Registrationmagic 3.7.2.9 Metagauss Registrationmagic 3.7.3.0 Metagauss Registrationmagic 3.7.5.0 Metagauss Registrationmagic 3.7.5.1 Metagauss Registrationmagic 3.7.5.2 Metagauss Registrationmagic 3.7.5.3 Metagauss Registrationmagic 3.7.5.4 Metagauss Registrationmagic 3.7.5.5 Metagauss Registrationmagic 3.7.5.6 Metagauss Registrationmagic 3.7.5.7 Metagauss Registrationmagic 3.7.5.8 Metagauss Registrationmagic 3.7.5.9 Metagauss Registrationmagic 3.7.6.0 Metagauss Registrationmagic 3.7.6.2 Metagauss Registrationmagic 3.7.6.3 Metagauss Registrationmagic 3.7.7.0 Metagauss Registrationmagic 3.7.7.1 Metagauss Registrationmagic 3.7.7.3 Metagauss Registrationmagic 3.7.7.5 Metagauss Registrationmagic 3.7.7.6 Metagauss Registrationmagic 3.7.7.7 Metagauss Registrationmagic 3.7.8.0 Metagauss Registrationmagic 3.7.8.1 Metagauss Registrationmagic 3.7.8.2 Metagauss Registrationmagic 3.7.8.5 Metagauss Registrationmagic 3.7.8.6 Metagauss Registrationmagic 3.7.8.7 Metagauss Registrationmagic 3.7.8.8 Metagauss Registrationmagic 3.7.8.9 Metagauss Registrationmagic 3.7.9.0 Metagauss Registrationmagic 3.7.9.1 Metagauss Registrationmagic 3.7.9.2 Metagauss Registrationmagic 3.7.9.3 Metagauss Registrationmagic 3.7.9.4 Metagauss Registrationmagic 3.7.9.5 Metagauss Registrationmagic 3.7.9.6 Metagauss Registrationmagic 3.7.9.7 Metagauss Registrationmagic 3.7.9.8 Metagauss Registrationmagic 3.7.9.9 Metagauss Registrationmagic 3.8.0.0 Metagauss Registrationmagic 3.8.0.1 Metagauss Registrationmagic 3.8.0.2 Metagauss Registrationmagic 3.8.0.3 Metagauss Registrationmagic 3.8.0.4 Metagauss Registrationmagic 3.8.0.9 Metagauss Registrationmagic 3.8.1.0 Metagauss Registrationmagic 3.8.1.1 Metagauss Registrationmagic 3.8.1.2 Metagauss Registrationmagic 3.8.1.3 Metagauss Registrationmagic 3.8.1.4 Metagauss Registrationmagic 3.8.1.5 Metagauss Registrationmagic 3.8.1.6 Metagauss Registrationmagic 3.8.1.7 Metagauss Registrationmagic 3.8.1.8 Metagauss Registrationmagic 3.8.1.9 Metagauss Registrationmagic 3.8.2.0 Metagauss Registrationmagic 3.8.2.2 Metagauss Registrationmagic 3.8.2.3 Metagauss Registrationmagic 3.8.2.4 Metagauss Registrationmagic 3.8.2.5 Metagauss Registrationmagic 3.8.2.6 Metagauss Registrationmagic 3.8.3.0 Metagauss Registrationmagic 3.8.3.1 Metagauss Registrationmagic 3.8.3.2 Metagauss Registrationmagic 3.8.3.3 Metagauss Registrationmagic 3.8.3.4 Metagauss Registrationmagic 3.8.3.6 Metagauss Registrationmagic 3.8.3.7 Metagauss Registrationmagic 3.8.3.8 Metagauss Registrationmagic 3.8.3.9 Metagauss Registrationmagic 3.8.4.0 Metagauss Registrationmagic 4.0.0.0 Metagauss Registrationmagic 4.0.1.0 Metagauss Registrationmagic 4.1.1.0 Metagauss Registrationmagic 4.1.2.0 Metagauss Registrationmagic 4.1.3.0 Metagauss Registrationmagic 4.2.1.0 Metagauss Registrationmagic 4.3.0.0 Metagauss Registrationmagic 4.3.0.1 Metagauss Registrationmagic 4.3.1.0 Metagauss Registrationmagic 4.3.1.1 Metagauss Registrationmagic 4.3.1.2 Metagauss Registrationmagic 4.3.2.0 Metagauss Registrationmagic 4.3.2.1 Metagauss Registrationmagic 4.3.2.2 Metagauss Registrationmagic 4.3.2.3 Metagauss Registrationmagic 4.3.2.4 Metagauss Registrationmagic 4.3.2.5 Metagauss Registrationmagic 4.3.2.6 Metagauss Registrationmagic 4.4.0.0 Metagauss Registrationmagic 4.4.0.1 Metagauss Registrationmagic 4.4.0.2 Metagauss Registrationmagic 4.5.0.0 Metagauss Registrationmagic 4.5.1.0 Metagauss Registrationmagic 4.5.1.1 Metagauss Registrationmagic 4.5.1.2 Metagauss Registrationmagic 4.5.2.0 Metagauss Registrationmagic 4.5.2.1 Metagauss Registrationmagic 4.5.2.2 Metagauss Registrationmagic 4.5.4.0 Metagauss Registrationmagic 4.5.4.1 Metagauss Registrationmagic 4.5.5.0 Metagauss Registrationmagic 4.5.6.0 Metagauss Registrationmagic 4.5.6.1 Metagauss Registrationmagic 4.5.6.2 Metagauss Registrationmagic 4.5.6.3 Metagauss Registrationmagic 4.5.6.4 Metagauss Registrationmagic 4.5.6.5 Metagauss Registrationmagic 4.5.7.0 Metagauss Registrationmagic 4.5.7.1 Metagauss Registrationmagic 4.5.7.2 Metagauss Registrationmagic 4.5.7.3 Metagauss Registrationmagic 4.5.7.4 Metagauss Registrationmagic 4.5.7.5 Metagauss Registrationmagic 4.5.8.0 Metagauss Registrationmagic 4.5.8.1 Metagauss Registrationmagic 4.5.8.2 Metagauss Registrationmagic 4.5.8.3 Metagauss Registrationmagic 4.5.9.0 Metagauss Registrationmagic 4.5.9.1 Metagauss Registrationmagic 4.5.9.2 Metagauss Registrationmagic 4.5.9.3 Metagauss Registrationmagic 4.6.0.0 Metagauss Registrationmagic 4.6.0.1 Metagauss Registrationmagic 4.6.0.3	229

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References