← Back

Metagauss

metagauss

104 CVEs • 7 products

Products (7)

Click to collapse
Toggle
Profilegrid
profilegrid
35 CVEs
Registrationmagic
registrationmagic
34 CVEs
Eventprime
eventprime
27 CVEs
Download Plugin
download_plugin
5 CVEs
Leadmagic
leadmagic
1 CVE
Themeflection Numbers
themeflection_numbers
1 CVE
Download Theme
download_theme
1 CVE

CVEs (104)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-9456
1Metagauss
1Registrationmagic
Jun 17, 2026
Mar 6, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_rm_user_controller.php...Show more
In the RegistrationMagic plugin through 4.6.0.3 for WordPress, the user controller allows remote authenticated users (with minimal privileges) to elevate their privileges to administrator via class_rm_user_controller.php rm_user_edit.Show less
CVE-2020-9455
1Metagauss
1Registrationmagic
Jun 17, 2026
Mar 6, 2020
N/A· v4
4.3 MEDIUM· v3
4.0 MEDIUM· v2
The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of the site via class_rm_user_services.php send_email_user_view.
CVE-2020-9454
1Metagauss
1Registrationmagic
Jun 17, 2026
Mar 6, 2020
N/A· v4
8.8 HIGH· v3
6.8 MEDIUM· v2
A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, including deleting use...Show more
A CSRF vulnerability in the RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote attackers to forge requests on behalf of a site administrator to change all settings for the plugin, including deleting users, creating new roles with escalated privileges, and allowing PHP file uploads via forms.Show less
CVE-2019-15873
1Metagauss
1Profilegrid
Jun 17, 2026
Sep 3, 2019
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by...Show more
The profilegrid-user-profiles-groups-and-communities plugin before 2.8.6 for WordPress has remote code execution via an wp-admin/admin-ajax.php request with the action=pm_template_preview&html=<?php substring followed by PHP code.Show less