CVE-2020-9458: 
WordPress vulnerability analysis and mitigation

CVE-2020-9458 is a security vulnerability discovered in the RegistrationMagic WordPress plugin through version 4.6.0.3. The vulnerability allows remote authenticated users with minimal privileges to export submitted form data and settings via the class_rm_form_controller.php rm_form_export functionality (NVD, Wordfence).

The vulnerability exists in the export function of the RegistrationMagic plugin, which lacks proper authorization checks. The issue has a CVSS v3.1 Base Score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is classified as CWE-862: Missing Authorization, indicating a fundamental flaw in the access control mechanism (NVD).

The vulnerability allows authenticated users with minimal privileges to access and export sensitive form data and settings from the plugin. This could lead to unauthorized access to potentially sensitive user information submitted through registration forms on the affected WordPress sites (NVD).

The vulnerability has been patched in RegistrationMagic version 4.6.0.4. Users are advised to update to this version or later to mitigate the security risk (WordPress Plugin).