Fullworks

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Fullworks records in CISA KEV

No Fullworks vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Stop User Enumeration · all components

TI-2025-03831 CVE-2025-4302 · GHSA-498r-64c2-wwrm

MEDIUM 63

The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00984 Published 2025-07-17 Fixed in 1.7.3

TI-2017-13709 CVE-2017-18536 · GHSA-89h9-hfwf-446p

LOW 31

The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0203 Published 2019-08-21 No fix listed CWE-79

TI-2017-14542 CVE-2017-1000226 · GHSA-4936-wqj9-mmwh

LOW 27

Stop User Enumeration 1.3.8 allows user enumeration via the REST API

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01385 Published 2017-11-17 No fix listed CWE-200