CVE-2020-9458: High severity Metagauss Registrationmagic Wordpress vulnerability
In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privileges) to export submitted form data and settings via classrmformcontroller.php rmformexport.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-9458?
CVE-2020-9458 is a vulnerability in the RegistrationMagic plugin for WordPress, allowing remote authenticated users to export form data and settings.
What is the severity of CVE-2020-9458?
The severity of CVE-2020-9458 is high with a CVSS score of 8.8.
How does CVE-2020-9458 impact WordPress?
CVE-2020-9458 allows remote authenticated users to export form data and settings in the RegistrationMagic plugin.
How can I fix CVE-2020-9458?
To fix CVE-2020-9458, ensure you have updated to RegistrationMagic plugin version 4.6.0.3 or higher.
Where can I find more information about CVE-2020-9458?
You can find more information about CVE-2020-9458 in the references provided: https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/#developers, https://wpvulndb.com/vulnerabilities/10116, https://www.wordfence.com/blog/2020/03/multiple-vulnerabilities-patched-in-registrationmagic-plugin/