Vulnerabilities > CVE-2020-9457 - Missing Authorization vulnerability in Metagauss Registrationmagic

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

metagauss

CWE-862

NVD

Published: 2020-03-06

Updated: 2022-01-21

Summary

The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to import custom vulnerable forms and change form settings via class_rm_form_settings_controller.php, resulting in privilege escalation.

Vulnerable Configurations

Part	Description	Count
Application	Metagauss Metagauss Registrationmagic - Metagauss Registrationmagic 1.0 Metagauss Registrationmagic 1.1 Metagauss Registrationmagic 1.1.1 Metagauss Registrationmagic 1.2 Metagauss Registrationmagic 1.3 Metagauss Registrationmagic 1.3.2 Metagauss Registrationmagic 1.3.3 Metagauss Registrationmagic 1.3.4 Metagauss Registrationmagic 1.3.5 Metagauss Registrationmagic 1.3.6 Metagauss Registrationmagic 1.3.7 Metagauss Registrationmagic 1.3.8 Metagauss Registrationmagic 1.3.9 Metagauss Registrationmagic 1.3.10 Metagauss Registrationmagic 1.3.11 Metagauss Registrationmagic 1.3.12 Metagauss Registrationmagic 1.3.13 Metagauss Registrationmagic 1.3.14 Metagauss Registrationmagic 1.3.15 Metagauss Registrationmagic 1.3.16 Metagauss Registrationmagic 1.3.17 Metagauss Registrationmagic 1.3.18 Metagauss Registrationmagic 1.3.19 Metagauss Registrationmagic 1.3.21 Metagauss Registrationmagic 1.3.23 Metagauss Registrationmagic 1.4 Metagauss Registrationmagic 1.4.1 Metagauss Registrationmagic 1.4.2 Metagauss Registrationmagic 1.5 Metagauss Registrationmagic 1.5.1 Metagauss Registrationmagic 2.0 Metagauss Registrationmagic 2.0.1 Metagauss Registrationmagic 2.0.2 Metagauss Registrationmagic 2.2 Metagauss Registrationmagic 2.2.1 Metagauss Registrationmagic 2.2.2 Metagauss Registrationmagic 2.5 Metagauss Registrationmagic 2.5.1 Metagauss Registrationmagic 2.5.2 Metagauss Registrationmagic 2.5.3 Metagauss Registrationmagic 2.5.4 Metagauss Registrationmagic 3.0 Metagauss Registrationmagic 3.0.1 Metagauss Registrationmagic 3.0.2 Metagauss Registrationmagic 3.1.0 Metagauss Registrationmagic 3.1.1 Metagauss Registrationmagic 3.1.2 Metagauss Registrationmagic 3.1.4 Metagauss Registrationmagic 3.1.5 Metagauss Registrationmagic 3.1.7 Metagauss Registrationmagic 3.1.7.2 Metagauss Registrationmagic 3.1.7.3 Metagauss Registrationmagic 3.1.7.4 Metagauss Registrationmagic 3.5 Metagauss Registrationmagic 3.5.0.1 Metagauss Registrationmagic 3.5.0.2 Metagauss Registrationmagic 3.5.0.3 Metagauss Registrationmagic 3.5.0.4 Metagauss Registrationmagic 3.5.1 Metagauss Registrationmagic 3.5.1.1 Metagauss Registrationmagic 3.5.1.2 Metagauss Registrationmagic 3.5.1.3 Metagauss Registrationmagic 3.5.1.31 Metagauss Registrationmagic 3.5.2 Metagauss Registrationmagic 3.5.2.1 Metagauss Registrationmagic 3.5.2.2 Metagauss Registrationmagic 3.5.2.3 Metagauss Registrationmagic 3.5.3 Metagauss Registrationmagic 3.5.3.1 Metagauss Registrationmagic 3.5.3.2 Metagauss Registrationmagic 3.5.3.3 Metagauss Registrationmagic 3.5.4 Metagauss Registrationmagic 3.5.4.1 Metagauss Registrationmagic 3.5.4.2 Metagauss Registrationmagic 3.6.0.0 Metagauss Registrationmagic 3.6.0.1 Metagauss Registrationmagic 3.6.0.2 Metagauss Registrationmagic 3.6.0.3 Metagauss Registrationmagic 3.6.0.4 Metagauss Registrationmagic 3.6.0.5 Metagauss Registrationmagic 3.6.0.6 Metagauss Registrationmagic 3.6.0.7 Metagauss Registrationmagic 3.6.0.8 Metagauss Registrationmagic 3.6.0.9 Metagauss Registrationmagic 3.6.1.0 Metagauss Registrationmagic 3.6.1.1 Metagauss Registrationmagic 3.6.1.2 Metagauss Registrationmagic 3.6.1.3 Metagauss Registrationmagic 3.7.0.0 Metagauss Registrationmagic 3.7.1.0 Metagauss Registrationmagic 3.7.1.1 Metagauss Registrationmagic 3.7.1.2 Metagauss Registrationmagic 3.7.1.3 Metagauss Registrationmagic 3.7.1.4 Metagauss Registrationmagic 3.7.2.0 Metagauss Registrationmagic 3.7.2.1 Metagauss Registrationmagic 3.7.2.2 Metagauss Registrationmagic 3.7.2.3 Metagauss Registrationmagic 3.7.2.4 Metagauss Registrationmagic 3.7.2.5 Metagauss Registrationmagic 3.7.2.6 Metagauss Registrationmagic 3.7.2.7 Metagauss Registrationmagic 3.7.2.8 Metagauss Registrationmagic 3.7.2.9 Metagauss Registrationmagic 3.7.3.0 Metagauss Registrationmagic 3.7.5.0 Metagauss Registrationmagic 3.7.5.1 Metagauss Registrationmagic 3.7.5.2 Metagauss Registrationmagic 3.7.5.3 Metagauss Registrationmagic 3.7.5.4 Metagauss Registrationmagic 3.7.5.5 Metagauss Registrationmagic 3.7.5.6 Metagauss Registrationmagic 3.7.5.7 Metagauss Registrationmagic 3.7.5.8 Metagauss Registrationmagic 3.7.5.9 Metagauss Registrationmagic 3.7.6.0 Metagauss Registrationmagic 3.7.6.2 Metagauss Registrationmagic 3.7.6.3 Metagauss Registrationmagic 3.7.7.0 Metagauss Registrationmagic 3.7.7.1 Metagauss Registrationmagic 3.7.7.3 Metagauss Registrationmagic 3.7.7.5 Metagauss Registrationmagic 3.7.7.6 Metagauss Registrationmagic 3.7.7.7 Metagauss Registrationmagic 3.7.8.0 Metagauss Registrationmagic 3.7.8.1 Metagauss Registrationmagic 3.7.8.2 Metagauss Registrationmagic 3.7.8.5 Metagauss Registrationmagic 3.7.8.6 Metagauss Registrationmagic 3.7.8.7 Metagauss Registrationmagic 3.7.8.8 Metagauss Registrationmagic 3.7.8.9 Metagauss Registrationmagic 3.7.9.0 Metagauss Registrationmagic 3.7.9.1 Metagauss Registrationmagic 3.7.9.2 Metagauss Registrationmagic 3.7.9.3 Metagauss Registrationmagic 3.7.9.4 Metagauss Registrationmagic 3.7.9.5 Metagauss Registrationmagic 3.7.9.6 Metagauss Registrationmagic 3.7.9.7 Metagauss Registrationmagic 3.7.9.8 Metagauss Registrationmagic 3.7.9.9 Metagauss Registrationmagic 3.8.0.0 Metagauss Registrationmagic 3.8.0.1 Metagauss Registrationmagic 3.8.0.2 Metagauss Registrationmagic 3.8.0.3 Metagauss Registrationmagic 3.8.0.4 Metagauss Registrationmagic 3.8.0.9 Metagauss Registrationmagic 3.8.1.0 Metagauss Registrationmagic 3.8.1.1 Metagauss Registrationmagic 3.8.1.2 Metagauss Registrationmagic 3.8.1.3 Metagauss Registrationmagic 3.8.1.4 Metagauss Registrationmagic 3.8.1.5 Metagauss Registrationmagic 3.8.1.6 Metagauss Registrationmagic 3.8.1.7 Metagauss Registrationmagic 3.8.1.8 Metagauss Registrationmagic 3.8.1.9 Metagauss Registrationmagic 3.8.2.0 Metagauss Registrationmagic 3.8.2.2 Metagauss Registrationmagic 3.8.2.3 Metagauss Registrationmagic 3.8.2.4 Metagauss Registrationmagic 3.8.2.5 Metagauss Registrationmagic 3.8.2.6 Metagauss Registrationmagic 3.8.3.0 Metagauss Registrationmagic 3.8.3.1 Metagauss Registrationmagic 3.8.3.2 Metagauss Registrationmagic 3.8.3.3 Metagauss Registrationmagic 3.8.3.4 Metagauss Registrationmagic 3.8.3.6 Metagauss Registrationmagic 3.8.3.7 Metagauss Registrationmagic 3.8.3.8 Metagauss Registrationmagic 3.8.3.9 Metagauss Registrationmagic 3.8.4.0 Metagauss Registrationmagic 4.0.0.0 Metagauss Registrationmagic 4.0.1.0 Metagauss Registrationmagic 4.1.1.0 Metagauss Registrationmagic 4.1.2.0 Metagauss Registrationmagic 4.1.3.0 Metagauss Registrationmagic 4.2.1.0 Metagauss Registrationmagic 4.3.0.0 Metagauss Registrationmagic 4.3.0.1 Metagauss Registrationmagic 4.3.1.0 Metagauss Registrationmagic 4.3.1.1 Metagauss Registrationmagic 4.3.1.2 Metagauss Registrationmagic 4.3.2.0 Metagauss Registrationmagic 4.3.2.1 Metagauss Registrationmagic 4.3.2.2 Metagauss Registrationmagic 4.3.2.3 Metagauss Registrationmagic 4.3.2.4 Metagauss Registrationmagic 4.3.2.5 Metagauss Registrationmagic 4.3.2.6 Metagauss Registrationmagic 4.4.0.0 Metagauss Registrationmagic 4.4.0.1 Metagauss Registrationmagic 4.4.0.2 Metagauss Registrationmagic 4.5.0.0 Metagauss Registrationmagic 4.5.1.0 Metagauss Registrationmagic 4.5.1.1 Metagauss Registrationmagic 4.5.1.2 Metagauss Registrationmagic 4.5.2.0 Metagauss Registrationmagic 4.5.2.1 Metagauss Registrationmagic 4.5.2.2 Metagauss Registrationmagic 4.5.4.0 Metagauss Registrationmagic 4.5.4.1 Metagauss Registrationmagic 4.5.5.0 Metagauss Registrationmagic 4.5.6.0 Metagauss Registrationmagic 4.5.6.1 Metagauss Registrationmagic 4.5.6.2 Metagauss Registrationmagic 4.5.6.3 Metagauss Registrationmagic 4.5.6.4 Metagauss Registrationmagic 4.5.6.5 Metagauss Registrationmagic 4.5.7.0 Metagauss Registrationmagic 4.5.7.1 Metagauss Registrationmagic 4.5.7.2 Metagauss Registrationmagic 4.5.7.3 Metagauss Registrationmagic 4.5.7.4 Metagauss Registrationmagic 4.5.7.5 Metagauss Registrationmagic 4.5.8.0 Metagauss Registrationmagic 4.5.8.1 Metagauss Registrationmagic 4.5.8.2 Metagauss Registrationmagic 4.5.8.3 Metagauss Registrationmagic 4.5.9.0 Metagauss Registrationmagic 4.5.9.1 Metagauss Registrationmagic 4.5.9.2 Metagauss Registrationmagic 4.5.9.3 Metagauss Registrationmagic 4.6.0.0 Metagauss Registrationmagic 4.6.0.1 Metagauss Registrationmagic 4.6.0.3	229

Common Weakness Enumeration (CWE)

CWE-862 - Missing Authorization

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References