CVE-2025-15520

RegistrationMagic <= 6.0.7.2 - Subscriber+ Sensitive Data Disclosure PUBLISHED

Description (CNA)

The RegistrationMagic WordPress plugin before 6.0.7.2 checks nonces but not capabilities, allowing for the disclosure of some sensitive data to subscribers and above.

Affected (CNA)

Vendor / product	Versions
Unknown / RegistrationMagic	affected 0 before 6.0.7.2

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/996f1c93-4b28-4cec-9d7c-fb66d0addabc/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.