CVE-2026-83560
Last modified
CVE-2026-83560 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data (id, username, email address and registration date) of registered users..
Description
The New User Approve WordPress plugin before 3.2.10 does not properly verify authentication on a set of integration REST API routes when the integration is unconfigured, allowing unauthenticated attackers to retrieve personal data (id, username, email address and registration date) of registered users.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Unknown | New User Approve | >= 3.1.0, < 3.2.10 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-83560?
How severe is CVE-2026-83560?
How do I fix CVE-2026-83560?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8355IBM ContextForge MCP Gateway 0.1.0 through 1.0.5 is vulnerab…5.4
- CVE-2026-83550A flaw was found in postgres-exporter. Due to the blank impo…7.1
- CVE-2026-83551Cleartext storage of sensitive information in the @step and …7.2
- CVE-2026-83555The Email Subscribers & Newsletters WordPress plugin before…5.3
- CVE-2026-83557DefaultBaseTypeLimitingValidator is the PolymorphicTypeValid…5.6
- CVE-2026-8356LibreOffice can import presentations in the legacy binary PP…5.4
- CVE-2026-83561The Complianz GDPR/CCPA Cookie Consent Banner plugin for Wor…7.2
- CVE-2026-83562Contributor Cross Site Scripting (XSS) in WCFM Marketplace <…6.5
- CVE-2026-83564Use after free in Microsoft Windows Search Component allows …7
- CVE-2026-83565Buffer over-read in Windows Encrypting File System (EFS) all…5.5
- CVE-2026-83566Use after free in Windows Win32K - ICOMP allows an authorize…7
- CVE-2026-83567Out-of-bounds read in Windows NTFS allows an authorized atta…7.8
Are you affected by CVE-2026-83560?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST