Vulnerabilities

TI-2025-03831 CVE-2025-4302 · GHSA-498r-64c2-wwrm

Stop User Enumeration < 1.7.3 - Protection Bypass

MEDIUM 63

The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00984 Published 2025-07-17 Fixed in 1.7.3

TI-2017-13709 CVE-2017-18536 · GHSA-89h9-hfwf-446p

LOW 31

The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0203 Published 2019-08-21 No fix listed CWE-79

TI-2017-14542 CVE-2017-1000226 · GHSA-4936-wqj9-mmwh

LOW 27

Stop User Enumeration 1.3.8 allows user enumeration via the REST API

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.01385 Published 2017-11-17 No fix listed CWE-200