CVE-2025-15403

The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.7.1. This is due to the 'add_menu' function is accessible via the 'rm_user_exists' AJAX action and allows arbitrary updates to the 'admin_order' setting. This makes it possible for unauthenticated attackers to injecting an empty slug into the order parameter, and manipulate the plugin's menu generation logic, and when the admin menu is subsequently built, the plugin adds 'manage_options' capability for the target role. Note: The vulnerability can only be exploited unauthenticated, but further privilege escalation requires at least a subscriber user.

• CWE-269

• https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk/admin/class_rm_admin.php#L487
• https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk/admin/controllers/class_rm_options_controller.php#L562
• https://plugins.trac.wordpress.org/changeset/3440797/custom-registration-form-builder-with-submission-manager#file2
• https://www.wordfence.com/threat-intel/vulnerabilities/id/68dd9f6f-ccee-4a27-bd21-2fb32b92cc62?source=cve

Published

Jan 17, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15394A vulnerability was detected in iCMS up to 8.0.0. Affected i…7.2
• CVE-2025-15395IBM Jazz Foundation 7.0.3 through 7.0.3 iFix019 and 7.1.0 th…5.4
• CVE-2025-15396The Library Viewer WordPress plugin before 3.2.0 does not sa…7.1
• CVE-2025-15398A security vulnerability has been detected in Uasoft badaso …8.1
• CVE-2025-1540An issue has been discovered in GitLab CE/EE for Self-Manage…4.2
• CVE-2025-15400The OpenPix for WooCommerce WordPress plugin through 2.13.3 …6.5
• CVE-2025-15404A security vulnerability has been detected in campcodes Scho…8.8
• CVE-2025-15405A vulnerability was detected in PHPEMS up to 11.0. The impac…8.8
• CVE-2025-15406A flaw has been found in PHPGurukul Online Course Registrati…8.8
• CVE-2025-15407A vulnerability has been found in code-projects Online Guita…9.8
• CVE-2025-15408A vulnerability was found in code-projects Online Guitar Sto…9.8
• CVE-2025-15409A vulnerability was determined in code-projects Online Guita…9.8