PT-2026-103027

CVE-2026-83560

Published

2026-09-30

Updated

2026-09-30

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions New User Approve WordPress plugin versions prior to 3.2.10

Description Insufficient authentication verification on integration REST API endpoints occurs when the integration is unconfigured. This allows unauthenticated attackers to retrieve personal data of registered users, including id, username, email address, and registration date.

Recommendations Update New User Approve WordPress plugin to version 3.2.10 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Suhayb Ahmed

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers