Nxploited/CVE-2025-15403

PoC

RegistrationMagic <= 6.0.7.1 - Unauthenticated Privilege Escalation via admin_order

view exploit source poc_in_githubauthor Nxploitedpublished 2026-04-18catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2025-15403US	—	1.65% (76th)	Exploit	2026-01-17
The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.7.1. This is due to the 'add_menu' function is accessible…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.