CVE-2020-9455

The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of…

published March 6, 2020

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of the site via class_rm_user_services.php send_email_user_view.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01439 · 73.0th percentile
Published
2020-03-06T18:49Z
EPSS history
Timeline
  • 06 MAR 18:49Z
    The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of…
    cvelistv5