Skip to content
Sign in
5.3 Medium

CVE-2026-83560 The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST…

Description

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data (id, username, email address and registration date) of registered users.

Affected products and versions

Product Affected versions Fixed in
New User Approve 3.1 3.1.0 → < 3.2.10 3.2.10

Other CVEs of New User Approve

The 2 CVEs of New User Approve →
CVE-2022-1625 The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding… Not rated
Track this CVE