CVE-2020-9458

PoC —

CVSS 3.1

8.8 high

EPSS

3%p84

Published

Mar 6, 2020 (Mar 6, 2020)

Modified

Jun 17, 2026

Description

In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the export function allows remote authenticated users (with minimal privileges) to export submitted form data and settings via class_rm_form_controller.php rm_form_export.

Vendors: metagauss
Products: registrationmagic
Ecosystems: WordPress
Weakness: CWE-862
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news0 stories

No ingested article mentions this CVE yet.