Aller au contenu
Se connecter
5.3 Moyenne

CVE-2026-83560 The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST…

Description

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data (id, username, email address and registration date) of registered users.

Produits et versions touchés

Produit Versions touchées Corrigé en
New User Approve 3.1 3.1.0 → < 3.2.10 3.2.10

Autres CVE de New User Approve

Les 2 CVE de New User Approve →
CVE-2022-1625 The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding… Non notée
Suivre cette CVE