← Back to CVE List

CVE-2020-9456

Published: 2020-03-06T19:15Z
Last Modified: 2024-11-21T05:40Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_rm_user_controller.php rm_user_edit. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt