Vulnerabilities > CVE-2023-2548 - Authorization Bypass Through User-Controlled Key vulnerability in Metagauss Registrationmagic

CVSS 7.2 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

metagauss

CWE-639

NVD

Published: 2023-05-16

Updated: 2023-11-07

Summary

The RegistrationMagic plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 5.2.0.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for authenticated attackers, with administrator-level permissions and above, to change user passwords and potentially take over super-administrator accounts in multisite setup.

Vulnerable Configurations

Part	Description	Count
Application	Metagauss Metagauss Registrationmagic - Metagauss Registrationmagic 1.0 Metagauss Registrationmagic 1.1 Metagauss Registrationmagic 1.1.1 Metagauss Registrationmagic 1.2 Metagauss Registrationmagic 1.3 Metagauss Registrationmagic 1.3.2 Metagauss Registrationmagic 1.3.3 Metagauss Registrationmagic 1.3.4 Metagauss Registrationmagic 1.3.5 Metagauss Registrationmagic 1.3.6 Metagauss Registrationmagic 1.3.7 Metagauss Registrationmagic 1.3.8 Metagauss Registrationmagic 1.3.9 Metagauss Registrationmagic 1.3.10 Metagauss Registrationmagic 1.3.11 Metagauss Registrationmagic 1.3.12 Metagauss Registrationmagic 1.3.13 Metagauss Registrationmagic 1.3.14 Metagauss Registrationmagic 1.3.15 Metagauss Registrationmagic 1.3.16 Metagauss Registrationmagic 1.3.17 Metagauss Registrationmagic 1.3.18 Metagauss Registrationmagic 1.3.19 Metagauss Registrationmagic 1.3.21 Metagauss Registrationmagic 1.3.23 Metagauss Registrationmagic 1.4 Metagauss Registrationmagic 1.4.1 Metagauss Registrationmagic 1.4.2 Metagauss Registrationmagic 1.5 Metagauss Registrationmagic 1.5.1 Metagauss Registrationmagic 2.0 Metagauss Registrationmagic 2.0.1 Metagauss Registrationmagic 2.0.2 Metagauss Registrationmagic 2.2 Metagauss Registrationmagic 2.2.1 Metagauss Registrationmagic 2.2.2 Metagauss Registrationmagic 2.5 Metagauss Registrationmagic 2.5.1 Metagauss Registrationmagic 2.5.2 Metagauss Registrationmagic 2.5.3 Metagauss Registrationmagic 2.5.4 Metagauss Registrationmagic 3.0 Metagauss Registrationmagic 3.0.1 Metagauss Registrationmagic 3.0.2 Metagauss Registrationmagic 3.1.0 Metagauss Registrationmagic 3.1.1 Metagauss Registrationmagic 3.1.2 Metagauss Registrationmagic 3.1.4 Metagauss Registrationmagic 3.1.5 Metagauss Registrationmagic 3.1.7 Metagauss Registrationmagic 3.1.7.2 Metagauss Registrationmagic 3.1.7.3 Metagauss Registrationmagic 3.1.7.4 Metagauss Registrationmagic 3.5 Metagauss Registrationmagic 3.5.0.1 Metagauss Registrationmagic 3.5.0.2 Metagauss Registrationmagic 3.5.0.3 Metagauss Registrationmagic 3.5.0.4 Metagauss Registrationmagic 3.5.1 Metagauss Registrationmagic 3.5.1.1 Metagauss Registrationmagic 3.5.1.2 Metagauss Registrationmagic 3.5.1.3 Metagauss Registrationmagic 3.5.1.31 Metagauss Registrationmagic 3.5.2 Metagauss Registrationmagic 3.5.2.1 Metagauss Registrationmagic 3.5.2.2 Metagauss Registrationmagic 3.5.2.3 Metagauss Registrationmagic 3.5.3 Metagauss Registrationmagic 3.5.3.1 Metagauss Registrationmagic 3.5.3.2 Metagauss Registrationmagic 3.5.3.3 Metagauss Registrationmagic 3.5.4 Metagauss Registrationmagic 3.5.4.1 Metagauss Registrationmagic 3.5.4.2 Metagauss Registrationmagic 3.6.0.0 Metagauss Registrationmagic 3.6.0.1 Metagauss Registrationmagic 3.6.0.2 Metagauss Registrationmagic 3.6.0.3 Metagauss Registrationmagic 3.6.0.4 Metagauss Registrationmagic 3.6.0.5 Metagauss Registrationmagic 3.6.0.6 Metagauss Registrationmagic 3.6.0.7 Metagauss Registrationmagic 3.6.0.8 Metagauss Registrationmagic 3.6.0.9 Metagauss Registrationmagic 3.6.1.0 Metagauss Registrationmagic 3.6.1.1 Metagauss Registrationmagic 3.6.1.2 Metagauss Registrationmagic 3.6.1.3 Metagauss Registrationmagic 3.7.0.0 Metagauss Registrationmagic 3.7.1.0 Metagauss Registrationmagic 3.7.1.1 Metagauss Registrationmagic 3.7.1.2 Metagauss Registrationmagic 3.7.1.3 Metagauss Registrationmagic 3.7.1.4 Metagauss Registrationmagic 3.7.2.0 Metagauss Registrationmagic 3.7.2.1 Metagauss Registrationmagic 3.7.2.2 Metagauss Registrationmagic 3.7.2.3 Metagauss Registrationmagic 3.7.2.4 Metagauss Registrationmagic 3.7.2.5 Metagauss Registrationmagic 3.7.2.6 Metagauss Registrationmagic 3.7.2.7 Metagauss Registrationmagic 3.7.2.8 Metagauss Registrationmagic 3.7.2.9 Metagauss Registrationmagic 3.7.3.0 Metagauss Registrationmagic 3.7.5.0 Metagauss Registrationmagic 3.7.5.1 Metagauss Registrationmagic 3.7.5.2 Metagauss Registrationmagic 3.7.5.3 Metagauss Registrationmagic 3.7.5.4 Metagauss Registrationmagic 3.7.5.5 Metagauss Registrationmagic 3.7.5.6 Metagauss Registrationmagic 3.7.5.7 Metagauss Registrationmagic 3.7.5.8 Metagauss Registrationmagic 3.7.5.9 Metagauss Registrationmagic 3.7.6.0 Metagauss Registrationmagic 3.7.6.2 Metagauss Registrationmagic 3.7.6.3 Metagauss Registrationmagic 3.7.7.0 Metagauss Registrationmagic 3.7.7.1 Metagauss Registrationmagic 3.7.7.3 Metagauss Registrationmagic 3.7.7.5 Metagauss Registrationmagic 3.7.7.6 Metagauss Registrationmagic 3.7.7.7 Metagauss Registrationmagic 3.7.8.0 Metagauss Registrationmagic 3.7.8.1 Metagauss Registrationmagic 3.7.8.2 Metagauss Registrationmagic 3.7.8.5 Metagauss Registrationmagic 3.7.8.6 Metagauss Registrationmagic 3.7.8.7 Metagauss Registrationmagic 3.7.8.8 Metagauss Registrationmagic 3.7.8.9 Metagauss Registrationmagic 3.7.9.0 Metagauss Registrationmagic 3.7.9.1 Metagauss Registrationmagic 3.7.9.2 Metagauss Registrationmagic 3.7.9.3 Metagauss Registrationmagic 3.7.9.4 Metagauss Registrationmagic 3.7.9.5 Metagauss Registrationmagic 3.7.9.6 Metagauss Registrationmagic 3.7.9.7 Metagauss Registrationmagic 3.7.9.8 Metagauss Registrationmagic 3.7.9.9 Metagauss Registrationmagic 3.8.0.0 Metagauss Registrationmagic 3.8.0.1 Metagauss Registrationmagic 3.8.0.2 Metagauss Registrationmagic 3.8.0.3 Metagauss Registrationmagic 3.8.0.4 Metagauss Registrationmagic 3.8.0.9 Metagauss Registrationmagic 3.8.1.0 Metagauss Registrationmagic 3.8.1.1 Metagauss Registrationmagic 3.8.1.2 Metagauss Registrationmagic 3.8.1.3 Metagauss Registrationmagic 3.8.1.4 Metagauss Registrationmagic 3.8.1.5 Metagauss Registrationmagic 3.8.1.6 Metagauss Registrationmagic 3.8.1.7 Metagauss Registrationmagic 3.8.1.8 Metagauss Registrationmagic 3.8.1.9 Metagauss Registrationmagic 3.8.2.0 Metagauss Registrationmagic 3.8.2.2 Metagauss Registrationmagic 3.8.2.3 Metagauss Registrationmagic 3.8.2.4 Metagauss Registrationmagic 3.8.2.5 Metagauss Registrationmagic 3.8.2.6 Metagauss Registrationmagic 3.8.3.0 Metagauss Registrationmagic 3.8.3.1 Metagauss Registrationmagic 3.8.3.2 Metagauss Registrationmagic 3.8.3.3 Metagauss Registrationmagic 3.8.3.4 Metagauss Registrationmagic 3.8.3.6 Metagauss Registrationmagic 3.8.3.7 Metagauss Registrationmagic 3.8.3.8 Metagauss Registrationmagic 3.8.3.9 Metagauss Registrationmagic 3.8.4.0 Metagauss Registrationmagic 4.0.0.0 Metagauss Registrationmagic 4.0.1.0 Metagauss Registrationmagic 4.1.1.0 Metagauss Registrationmagic 4.1.2.0 Metagauss Registrationmagic 4.1.3.0 Metagauss Registrationmagic 4.2.1.0 Metagauss Registrationmagic 4.3.0.0 Metagauss Registrationmagic 4.3.0.1 Metagauss Registrationmagic 4.3.1.0 Metagauss Registrationmagic 4.3.1.1 Metagauss Registrationmagic 4.3.1.2 Metagauss Registrationmagic 4.3.2.0 Metagauss Registrationmagic 4.3.2.1 Metagauss Registrationmagic 4.3.2.2 Metagauss Registrationmagic 4.3.2.3 Metagauss Registrationmagic 4.3.2.4 Metagauss Registrationmagic 4.3.2.5 Metagauss Registrationmagic 4.3.2.6 Metagauss Registrationmagic 4.4.0.0 Metagauss Registrationmagic 4.4.0.1 Metagauss Registrationmagic 4.4.0.2 Metagauss Registrationmagic 4.5.0.0 Metagauss Registrationmagic 4.5.1.0 Metagauss Registrationmagic 4.5.1.1 Metagauss Registrationmagic 4.5.1.2 Metagauss Registrationmagic 4.5.2.0 Metagauss Registrationmagic 4.5.2.1 Metagauss Registrationmagic 4.5.2.2 Metagauss Registrationmagic 4.5.4.0 Metagauss Registrationmagic 4.5.4.1 Metagauss Registrationmagic 4.5.5.0 Metagauss Registrationmagic 4.5.6.0 Metagauss Registrationmagic 4.5.6.1 Metagauss Registrationmagic 4.5.6.2 Metagauss Registrationmagic 4.5.6.3 Metagauss Registrationmagic 4.5.6.4 Metagauss Registrationmagic 4.5.6.5 Metagauss Registrationmagic 4.5.7.0 Metagauss Registrationmagic 4.5.7.1 Metagauss Registrationmagic 4.5.7.2 Metagauss Registrationmagic 4.5.7.3 Metagauss Registrationmagic 4.5.7.4 Metagauss Registrationmagic 4.5.7.5 Metagauss Registrationmagic 4.5.8.0 Metagauss Registrationmagic 4.5.8.1 Metagauss Registrationmagic 4.5.8.2 Metagauss Registrationmagic 4.5.8.3 Metagauss Registrationmagic 4.5.9.0 Metagauss Registrationmagic 4.5.9.1 Metagauss Registrationmagic 4.5.9.2 Metagauss Registrationmagic 4.5.9.3 Metagauss Registrationmagic 4.6.0.0 Metagauss Registrationmagic 4.6.0.1 Metagauss Registrationmagic 4.6.0.3 Metagauss Registrationmagic 4.6.0.4 Metagauss Registrationmagic 4.6.0.5 Metagauss Registrationmagic 4.6.0.6 Metagauss Registrationmagic 4.6.0.7 Metagauss Registrationmagic 4.6.0.8 Metagauss Registrationmagic 4.6.0.9 Metagauss Registrationmagic 4.6.1.1 Metagauss Registrationmagic 4.6.1.2 Metagauss Registrationmagic 4.6.1.3 Metagauss Registrationmagic 4.6.1.4 Metagauss Registrationmagic 4.6.1.5 Metagauss Registrationmagic 4.6.1.6 Metagauss Registrationmagic 4.6.1.7 Metagauss Registrationmagic 4.6.1.8 Metagauss Registrationmagic 4.6.1.9 Metagauss Registrationmagic 4.6.2.0 Metagauss Registrationmagic 4.6.2.1 Metagauss Registrationmagic 4.6.2.2 Metagauss Registrationmagic 4.6.2.3 Metagauss Registrationmagic 4.6.2.4 Metagauss Registrationmagic 4.6.2.5 Metagauss Registrationmagic 4.6.2.6 Metagauss Registrationmagic 4.6.2.7 Metagauss Registrationmagic 4.6.2.8 Metagauss Registrationmagic 4.6.2.9 Metagauss Registrationmagic 4.6.3.0 Metagauss Registrationmagic 4.6.3.5 Metagauss Registrationmagic 4.6.3.6 Metagauss Registrationmagic 4.6.3.7 Metagauss Registrationmagic 4.6.3.8 Metagauss Registrationmagic 4.6.3.9 Metagauss Registrationmagic 4.6.4.0 Metagauss Registrationmagic 4.6.4.1 Metagauss Registrationmagic 5.0.0.0 Metagauss Registrationmagic 5.0.0.1 Metagauss Registrationmagic 5.0.0.2 Metagauss Registrationmagic 5.0.0.3 Metagauss Registrationmagic 5.0.0.4 Metagauss Registrationmagic 5.0.0.5 Metagauss Registrationmagic 5.0.0.7 Metagauss Registrationmagic 5.0.0.8 Metagauss Registrationmagic 5.0.0.9 Metagauss Registrationmagic 5.0.1.0 Metagauss Registrationmagic 5.0.1.1 Metagauss Registrationmagic 5.0.1.2 Metagauss Registrationmagic 5.0.1.3 Metagauss Registrationmagic 5.0.1.4 Metagauss Registrationmagic 5.0.1.5 Metagauss Registrationmagic 5.0.1.6 Metagauss Registrationmagic 5.0.1.7 Metagauss Registrationmagic 5.0.1.8 Metagauss Registrationmagic 5.0.1.9 Metagauss Registrationmagic 5.0.2.0 Metagauss Registrationmagic 5.0.2.1 Metagauss Registrationmagic 5.0.2.2 Metagauss Registrationmagic 5.0.2.4 Metagauss Registrationmagic 5.1.0.0 Metagauss Registrationmagic 5.1.1.0 Metagauss Registrationmagic 5.1.1.1 Metagauss Registrationmagic 5.1.2.0 Metagauss Registrationmagic 5.1.2.1 Metagauss Registrationmagic 5.1.2.2 Metagauss Registrationmagic 5.1.2.3 Metagauss Registrationmagic 5.1.2.4 Metagauss Registrationmagic 5.1.5.0 Metagauss Registrationmagic 5.1.5.5 Metagauss Registrationmagic 5.1.5.6 Metagauss Registrationmagic 5.1.5.7 Metagauss Registrationmagic 5.1.5.8 Metagauss Registrationmagic 5.1.6.0 Metagauss Registrationmagic 5.1.6.1 Metagauss Registrationmagic 5.1.6.2 Metagauss Registrationmagic 5.1.6.3 Metagauss Registrationmagic 5.1.6.4 Metagauss Registrationmagic 5.1.6.5 Metagauss Registrationmagic 5.1.6.6 Metagauss Registrationmagic 5.1.6.7 Metagauss Registrationmagic 5.1.6.8 Metagauss Registrationmagic 5.1.6.9 Metagauss Registrationmagic 5.1.7.0 Metagauss Registrationmagic 5.1.7.1 Metagauss Registrationmagic 5.1.7.2 Metagauss Registrationmagic 5.1.7.5 Metagauss Registrationmagic 5.1.7.6 Metagauss Registrationmagic 5.1.7.8 Metagauss Registrationmagic 5.1.8.0 Metagauss Registrationmagic 5.1.8.2 Metagauss Registrationmagic 5.1.8.3 Metagauss Registrationmagic 5.1.8.4 Metagauss Registrationmagic 5.1.8.5 Metagauss Registrationmagic 5.1.8.6 Metagauss Registrationmagic 5.1.8.7 Metagauss Registrationmagic 5.1.8.8 Metagauss Registrationmagic 5.1.8.9 Metagauss Registrationmagic 5.1.9.0 Metagauss Registrationmagic 5.1.9.1 Metagauss Registrationmagic 5.1.9.2 Metagauss Registrationmagic 5.1.9.3 Metagauss Registrationmagic 5.1.9.4 Metagauss Registrationmagic 5.1.9.5 Metagauss Registrationmagic 5.1.9.6 Metagauss Registrationmagic 5.1.9.8 Metagauss Registrationmagic 5.1.9.9 Metagauss Registrationmagic 5.2.0.0 Metagauss Registrationmagic 5.2.0.1 Metagauss Registrationmagic 5.2.0.2 Metagauss Registrationmagic 5.2.0.3 Metagauss Registrationmagic 5.2.0.4 Metagauss Registrationmagic 5.2.0.5	338

Common Weakness Enumeration (CWE)

CWE-639 - Authorization Bypass Through User-Controlled Key