Plugin icon

New User Approve

new-user-approve

Vulnerabilities:

11

Last Updated:

April 1, 2026

Active Installs:

20000

Published
Title
Fixed in
CVSS
Published
2026-03-20
Title
New User Approve < 3.2.4 - Missing Authorization
Fixed in
Fixed in 3.2.4
CVSS
4.3 (medium)
Published
2026-02-11
Title
New User Approve < 3.2.1 - Missing Authorization
Fixed in
Fixed in 3.2.1
CVSS
5.3 (medium)
Published
2026-01-27
Title
New User Approve < 3.2.3 - Missing Authorization to Unauthenticated Arbitrary User Approval, Denial, and Information Disclosure
Fixed in
Fixed in 3.2.3
CVSS
7.3 (high)
Published
2025-11-18
Title
New User Approve < 3.1.0 - Unauthenticated Sensitive Information Disclosure via Type Juggling
Fixed in
Fixed in 3.1.0
CVSS
5.3 (medium)
Published
2025-11-08
Title
New User Approve < 3.2.4 - Cross-Site Request Forgery
Fixed in
Fixed in 3.2.4
CVSS
4.3 (medium)
Published
2024-12-11
Title
New User Approve < 2.6.4 - Missing Authorization
Fixed in
Fixed in 2.6.4
CVSS
4.3 (medium)
Published
2023-12-26
Title
New User Approve < 2.5.2 - Cross-Site Request Forgery via admin_notices
Fixed in
Fixed in 2.5.2
CVSS
6.1 (medium)
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.5.1
CVSS
6.1 (medium)
Published
2022-06-01
Title
New User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRF
Fixed in
Fixed in 2.4
CVSS
5.4 (medium)
Published
2022-05-30
Title
New User Approve < 2.4.1 - Reflected Cross-Site Scripting
Fixed in
Fixed in 2.4.1
CVSS
6.1 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 2.1
CVSS
4.3 (medium)