CVE-2025-15403

🗓️ 17 Jan 2026 02:22:32Reported by WordfenceType

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

RegistrationMagic up to 6.0.7.1 enables unauthenticated privilege escalation via admin_order manipulation in add_menu.

Reporter	Title	Published	Views	Family All 17
GithubExploit	Mephisto	21 May 202605:06	–	githubexploit
GithubExploit	Exploit for CVE-2025-15403	18 Apr 202619:47	–	githubexploit
attackerkb	CVE-2025-15403	17 Jan 202602:22	–	attackerkb
Circl	CVE-2025-15403	17 Jan 202604:01	–	circl
CNNVD	WordPress Plugin RegistrationMagic has a security vulnerability	17 Jan 202600:00	–	cnnvd
Cvelist	CVE-2025-15403 RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order	17 Jan 202602:22	–	cvelist
EUVD	EUVD-2026-3164	17 Jan 202602:22	–	euvd
Kitploit	CVE-2025-15403	1 Oct 202615:10	–	kitploit
Nuclei	RegistrationMagic <= 6.0.7.1 - Privilege Escalation	5 Oct 202602:16	–	nuclei
NVD	CVE-2025-15403	17 Jan 202603:16	–	nvd

Vulners

Node

metagauss registrationmagicRange≤6.0.7.1wordpress

[
  {
    "vendor": "metagauss",
    "product": "RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "6.0.7.1",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk/admin/controllers/class_rm_options_controller.php
plugins	www.plugins.trac.wordpress.org/changeset/3440797/custom-registration-form-builder-with-submission-manager
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/68dd9f6f-ccee-4a27-bd21-2fb32b92cc62
plugins	www.plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk/admin/class_rm_admin.php

Parameter	Position	Path	Description	CWE
order	request body	/wp-admin/admin-ajax.php	Unauthenticated privilege escalation via admin_order by poisoning rm_admin_order through rm_user_exists AJAX action.	CWE-269
rm_slug	request body	/wp-admin/admin-ajax.php	Unauthenticated privilege escalation via admin_order by poisoning rm_admin_order through rm_user_exists AJAX action.	CWE-269
enable_admin_order	request body	/wp-admin/admin-ajax.php	Unauthenticated privilege escalation via admin_order by poisoning rm_admin_order through rm_user_exists AJAX action.	CWE-269
action	request body	/wp-admin/admin-ajax.php	Unauthenticated privilege escalation via admin_order by poisoning rm_admin_order through rm_user_exists AJAX action.	CWE-269

17 Jun 2026 08:37Current

6Medium risk

Vulners AI Score6

CVSS 3.19.8

EPSS0.01675

SSVC