Privilege Escalation Vulnerability in RegistrationMagic Plugin for WordPress

CVE-2025-15403

What is CVE-2025-15403?

The RegistrationMagic plugin for WordPress has a vulnerability that allows unauthenticated attackers to exploit the 'add_menu' function via the 'rm_user_exists' AJAX action. This flaw enables arbitrary updates to the 'admin_order' setting, permitting attackers to inject an empty slug into the order parameter. As a result, they can manipulate the plugin's menu generation logic. When the admin menu is built, the plugin incorrectly adds the 'manage_options' capability to the targeted user role, posing a significant risk of privilege escalation. Notably, to fully exploit this vulnerability, an attacker would need to have at least a subscriber user account.

References