CVE-2025-15403: metagauss registrationmagic – custom registration forms, user registration, payment, and user login Improper Privilege Management

Vulnerability summary

CVE-2025-15403 is a critical (CVSS 9.8) Improper Privilege Management vulnerability in metagauss registrationmagic – custom registration forms, user registration, payment, and user login. EPSS estimates a 1.65% chance of exploitation in the next 30 days, higher than 76.3% of scored vulnerabilities. Fixed in 6.0.7.2.

Timeline

1. 17-01-2026
   PublishedVulnerability first disclosed.
2. 08-04-2026
   Last modifiedVulnerability information updated.

Description

The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.7.1. This is due to the 'add_menu' function is accessible via the 'rm_user_exists' AJAX action and allows arbitrary updates to the 'admin_order' setting. This makes it possible for unauthenticated attackers to injecting an empty slug into the order parameter, and manipulate the plugin's menu generation logic, and when the admin menu is subsequently built, the plugin adds 'manage_options' capability for the target role. Note: The vulnerability can only be exploited unauthenticated, but further privilege escalation requires at least a subscriber user.

• CWE-269Improper Privilege ManagementThe product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.