CVE-2025-15520

The RegistrationMagic WordPress plugin before 6.0.7.2 checks nonces but not capabilities, allowing for the disclosure of some sensitive data to subscribers and above.

Score

CVSS 3.1 4.3 Medium

Status

Deferred - contact@wpscan.com

Published

2026-02-13

Last modified

2026-02-13

Affected products

• Registrationmagic (Unknown)

References

• https://wpscan.com/vulnerability/996f1c93-4b28-4cec-9d7c-fb66d0addabc/