CVE-2024-54323: WordPress New User Approve plugin <= 2.6.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Saad Iqbal New User Approve new-user-approve allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects New User Approve: from n/a through <= 2.6.2.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-54323?
CVE-2024-54323 is classified as a high severity vulnerability due to its potential exploitation of improperly configured access controls.
How do I fix CVE-2024-54323?
To fix CVE-2024-54323, update the WPExpertsio New User Approve plugin to the latest version above 2.6.2.
What are the consequences of CVE-2024-54323?
Exploiting CVE-2024-54323 can lead to unauthorized access and control over user approvals within the affected WordPress site.
Which versions of the software are affected by CVE-2024-54323?
CVE-2024-54323 affects all versions of the WPExpertsio New User Approve plugin from n/a through 2.6.2.
Who is vulnerable to CVE-2024-54323?
Any WordPress site using WPExpertsio New User Approve version 2.6.2 or earlier is vulnerable to CVE-2024-54323.