Security Advisory

CVE-2026-15255

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-07-30 06:00:09

Last updated 2026-07-30 15:02:30

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The RegistrationMagic WordPress plugin before 6.0.9.4 does not properly validate that a one-time password presented in a cookie belongs to the identity being requested before returning front-end form submissions, allowing unauthenticated attackers to read other users' form submission data, including personal information.

← Browse all CVEs View on cve.org ↗