EUVD-2026-15569Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionCVE.org
Incorrect Privilege Assignment vulnerability in Metagauss RegistrationMagic custom-registration-form-builder-with-submission-manager allows Privilege Escalation.This issue affects RegistrationMagic: from n/a through <= 6.0.7.1.
AnalysisAI
RegistrationMagic, a WordPress plugin for custom registration forms, contains an Incorrect Privilege Assignment vulnerability (CWE-266) that allows privilege escalation through improper access controls. Versions up to and including 6.0.7.1 are affected, enabling attackers to escalate privileges and potentially take over user accounts. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires Metagauss RegistrationMagic WordPress plugin version 6.0.7.1 or earlier installed and activated. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Despite the absence of a published CVSS vector and EPSS score, multiple indicators suggest this is a high-priority vulnerability warranting immediate remediation. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An unauthenticated or low-privileged attacker accesses the WordPress site's registration form powered by RegistrationMagic and exploits the improper privilege assignment flaw to escalate their role to administrator during or after form submission. Alternatively, an existing low-privilege user (subscriber or contributor) submits a specially crafted registration form or modifies form parameters to trigger privilege escalation without additional authentication. … |
| Remediation | Immediately upgrade RegistrationMagic to a version newer than 6.0.7.1 once available from the vendor; consult the Patchstack database link for patch release information and verify vendor advisory before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 7 days: Identify all affected systems and apply vendor patches promptly. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More from same product – last 7 days
Share
External POC / Exploit Code
Leaving vuln.today