CVE-2020-9454

A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator…

published March 6, 2020

CVSS
—
EPSS
1%
Percentile
65.1
In the wild
Unconfirmed
What it is

A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, including deleting users, creating new roles with escalated privileges, and allowing PHP file uploads via forms.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01090 · 65.1th percentile
Published
2020-03-06T18:43Z
EPSS history
Timeline
  • 06 MAR 18:43Z
    A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator…
    cvelistv5