CVE-2026-15255

5.3 Moyenne

Publiée le 30/07/2026 à 08:25 · Modifiée le 30/07/2026 à 18:16 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data, including personal information.

Traduire en français

Produits concernés

Unknown RegistrationMagic

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-639

Références

https://wpscan.com/vulnerability/21fa84b9-afa6-49f7-abb1-c1edabda3cd8/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories