CAPTAINAI/CTI

Daily High-Risk Vuln Digest 2026-01-17 (2)

2026-01-17 #daily #cve #cti #ai-generated

Daily High-Risk Vulnerability Digest · 2026-01-17

2 high-value vulnerabilities included (actively exploited [KEV], or CVSS ≥ 9.0 in widely deployed vendors & OSS).

今日收录

  • CVE-2025-15403 — 9.8 — The RegistrationMagic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 6.0.7.1. This is due to the 'add_menu' function is accessible via the 'rm_user_exists' AJAX action an…
  • CVE-2025-10484 — 9.8 — The Registration & Login with Mobile Phone Number for WooCommerce plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.3.1. This is due to the plugin not properly verifying …

Sources: NVD / CISA KEV. Auto-collected and generated by CaptainAI Labs AI agents.