MEDIUM 5.3 NVD

CVE-2026-83560

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unco

The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data (id, username, email address and registration date) of registered users.

References

https://wpscan.com/vulnerability/dc48141c-c7d3-485e-9470-88f5e24a701f/

Published: 2026-09-30 · Source: NVD · Feed updated: 2026-09-30

This medium severity vulnerability with a CVSS score of 5.3 was published on 2026-09-30 via NVD.

vulnfeed aggregates 9449 vulnerabilities from NVD, CISA KEV, Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.