New User Approve

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   New User Approve

Information

Software Type Plugin
Software Slug new-user-approve (view on wordpress.org)
Software Status Active
Software Author saadiqbal
Software Website newuserapprove.com
Software Downloads 899,877
Software Active Installs 20,000
Software Record Last Updated July 19, 2026

11 Vulnerabilities

Submit a Vulnerability
New User Approve <= 3.2.3 - Missing Authorization
4.3
CVE-2026-25390
Mar 20, 2026
Researcher: Phat RiO
New User Approve <= 3.2.0 - Missing Authorization
5.3
CVE-2025-69063
Feb 11, 2026
Researcher: Denver Jackson
New User Approve <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary User Approval, Denial, and Information Disclosure
7.3
CVE-2026-0832
Jan 27, 2026
Researcher: Deadbee
New User Approve <= 3.0.9 - Unauthenticated Sensitive Information Disclosure via Type Juggling
5.3
CVE-2025-12770
Nov 18, 2025
Researcher: Powpy
New User Approve <= 3.2.3 - Cross-Site Request Forgery
4.3
CVE-2025-63030
Nov 8, 2025
Researcher: Psai
New User Approve <= 2.6.2 - Missing Authorization
4.3
CVE-2024-54323
Dec 11, 2024
Researcher: SavPhill (Savphill)
New User Approve <= 2.5.1 - Cross-Site Request Forgery via admin_notices
6.1
CVE-2023-50902
Dec 26, 2023
Researcher: R3N0
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
6.1
CVE-2023-33999
Jul 18, 2023
Researcher: Rafie Muhammad
New User Approve <= 2.4 - Cross-Site Request Forgery
9.6
CVE-2022-1625
Jun 1, 2022
Researcher: Daniel Ruf
New User Approve <= 2.4 - Reflected Cross-Site Scripting
6.1
CVE ID Unknown
May 30, 2022
Researcher: WPScanTeam
Freemius SDK <= 2.4.2 - Missing Authorization Checks
6.3
CVE-2022-4974
Mar 4, 2022
Researchers:
Title Status CVE ID CVSS Researchers Date
New User Approve <= 3.2.3 - Missing Authorization Patched CVE-2026-25390 4.3 Phat RiO March 20, 2026
New User Approve <= 3.2.0 - Missing Authorization Patched CVE-2025-69063 5.3 Denver Jackson February 11, 2026
New User Approve <= 3.2.2 - Missing Authorization to Unauthenticated Arbitrary User Approval, Denial, and Information Disclosure Patched CVE-2026-0832 7.3 Deadbee January 27, 2026
New User Approve <= 3.0.9 - Unauthenticated Sensitive Information Disclosure via Type Juggling Patched CVE-2025-12770 5.3 Powpy November 18, 2025
New User Approve <= 3.2.3 - Cross-Site Request Forgery Patched CVE-2025-63030 4.3 Psai November 8, 2025
New User Approve <= 2.6.2 - Missing Authorization Patched CVE-2024-54323 4.3 SavPhill (Savphill) December 11, 2024
New User Approve <= 2.5.1 - Cross-Site Request Forgery via admin_notices Patched CVE-2023-50902 6.1 R3N0 December 26, 2023
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get Patched CVE-2023-33999 6.1 Rafie Muhammad July 18, 2023
New User Approve <= 2.4 - Cross-Site Request Forgery Patched CVE-2022-1625 9.6 Daniel Ruf June 1, 2022
New User Approve <= 2.4 - Reflected Cross-Site Scripting Patched 6.1 WPScanTeam May 30, 2022
Freemius SDK <= 2.4.2 - Missing Authorization Checks Patched CVE-2022-4974 6.3 March 4, 2022

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation