CVE-2025-6215

🗓️ 23 Jul 2025 02:24:37Reported by WordfenceType

Omnishop plugin allows unauthenticated user registrations, exposing sites to arbitrary account creation.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-6215	23 Jul 202506:30	–	circl
CNNVD	WordPress plugin Omnishop 安全漏洞	23 Jul 202500:00	–	cnnvd
Cvelist	CVE-2025-6215 Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint	23 Jul 202502:24	–	cvelist
EUVD	EUVD-2025-22405	3 Oct 202520:07	–	euvd
NVD	CVE-2025-6215	23 Jul 202503:15	–	nvd
Patchstack	WordPress Omnishop plugin <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint vulnerability	24 Jul 202508:00	–	patchstack
Positive Technologies	PT-2025-30515 · WordPress · Omnishop	23 Jul 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-6215	25 Jul 202502:29	–	redhatcve
Vulnrichment	CVE-2025-6215 Omnishop <= 1.0.9 - Missing Registration Restriction to Unauthenticated Account Creation via /users/register REST Endpoint	23 Jul 202502:24	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (July 21, 2025 to July 27, 2025)	31 Jul 202517:09	–	wordfence

Vulners

Node

omnishop omnishop_mobile_shop_apps_complementing_your_woocommerce_webshopRange≤1.0.9wordpress

[
  {
    "vendor": "omnishop",
    "product": "Omnishop – Mobile shop apps complementing your WooCommerce webshop",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.0.9",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/omnishop/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/12d465d2-cd89-476e-b70a-743151a23053

15 Apr 2026 00:35Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.3

EPSS0.00509

SSVC

CWE-862