### [CVE-2020-9455](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-9455)



### Description
The RegistrationMagic plugin through 4.6.0.3 for WordPress allows remote authenticated users (with minimal privileges) to send arbitrary emails on behalf of the site via class_rm_user_services.php send_email_user_view.
### POC
#### Reference
- https://wpvulndb.com/vulnerabilities/10116
#### Github
No PoCs found on GitHub currently.