CVE-2024-54323

CVE-2024-54323 affects the WordPress plugin New User Approve (WPExpertsio) with builds up to 2.6.2. The Connected documents confirm a Missing Authorization vulnerability in the plugin’s access control, enabling an actor without proper privileges to influence the New User Approve workflow. Public ...

CVE-2024-54323 WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in WPExpertsio New User Approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through 2.6.2...

CVE-2023-50902

CVE-2023-50902 is a CSRF vulnerability in the WordPress plugin New User Approve (WP-Plugins). The CVE affects New User Approve up to version 2.5.1 and is described as Cross-Site Request Forgery via the admin_notices pathway. The issue is documented with an in-scope remediation: upgrade to a patch...

CVE-2023-50902: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WPExpertsio New User Approve.This issue affects New User Approve: from n/a through 2.5.1...