CVE-2025-15520
RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure
MEDIUM 4.3EPSS 0.2%
The RegistrationMagic WordPress plugin before 6.0.7.2 checks nonces but not capabilities, allowing for the disclosure of some sensitive data to subscribers and above.
- Affected
- RegistrationMagic
- CVSS v3.1 CNA
- 4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N - EPSS
- 0.20% chance of exploitation in the next 30 days, 9th percentile
- Published
- 2026-02-13