PT-2026-7970 · WordPress · Registrationmagic

Brpsd · Publicado 2026-02-13 · Atualizado 2026-02-13 · CVE-2025-15520

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions RegistrationMagic WordPress plugin versions prior to 6.0.7.2

Description The RegistrationMagic WordPress plugin does not properly validate capabilities when checking nonces, which can lead to the disclosure of sensitive data to users with subscriber-level access or higher.

Recommendations Update RegistrationMagic WordPress plugin to version 6.0.7.2 or later.

Exploit

Correção

Identificadores relacionados

CVE-2025-15520

Produtos afetados

Registrationmagic

Referências · 5

• 🔥 https://wpscan.com/vulnerability/996f1c93-4b28-4cec-9d7c-fb66d0addabc · Exploit
• https://t.me/CVEtracker/44606 · Publicação no Telegram
• https://t.me/cveNotify/151920 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/2022210081429877217 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-15520 · Nota de Segurança