The vulnerability CVE-2025-69063 affects the New User Approve plugin by Saad Iqbal, specifically versions up to 3.2.0. It is a missing authorization issue where access control security levels are incorrectly configured, allowing unauthenticated attackers to perform actions that should require authorization. The CVSS 3.1 base score is 8.6, indicating a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts confidentiality (high), integrity (low), and availability (low). No patch or official remediation information is currently available.

Exploitation of this vulnerability could allow an unauthenticated attacker to bypass access controls in the New User Approve plugin, potentially leading to unauthorized access to sensitive information (high confidentiality impact), limited modification of data (low integrity impact), and minor disruption of service (low availability impact). There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the New User Approve plugin functionality to trusted users only, and monitor for unusual activity related to user approval processes. Avoid exposing the plugin interfaces to untrusted networks or users.