CVE-2022-1625

The CVE-2022-1625 entry concerns the WordPress plugin New User Approve (versions prior to 2.4). The root cause is missing CSRF protection when updating plugin settings and when creating invitation codes, enabling an attacker to inject or modify data by luring an admin to a crafted page. Impact st...

CVE-2023-50902

CVE-2023-50902 is a CSRF vulnerability in the WordPress plugin New User Approve (WP-Plugins). The CVE affects New User Approve up to version 2.5.1 and is described as Cross-Site Request Forgery via the admin_notices pathway. The issue is documented with an in-scope remediation: upgrade to a patch...