The vulnerability CVE-2025-69063 affects the New User Approve plugin by Saad Iqbal, specifically versions up to 3.2.0. It is caused by missing authorization controls, which results in incorrectly configured access control security levels. This allows an attacker to exploit the plugin remotely without authentication or user interaction, potentially leading to unauthorized information disclosure (confidentiality impact is low), complete integrity compromise (high impact), and limited availability impact (low). The CVSS vector indicates network attack vector, low complexity, no privileges required, and no user interaction.

Successful exploitation could allow an attacker to perform unauthorized actions within the New User Approve plugin, leading to high integrity impact and potential unauthorized changes. Confidentiality impact is low, and availability impact is low. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for suspicious activity related to user approval processes. Avoid exposing the plugin interface to untrusted networks.