Vulnerabilities (CVE)

Filtered by vendor Fullworks Subscribe
Filtered by product Stop User Enumeration
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-4302 1 Fullworks 1 Stop User Enumeration 2026-01-02 N/A 5.3 MEDIUM
The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path.
CVE-2017-1000226 1 Fullworks 1 Stop User Enumeration 2025-04-20 5.0 MEDIUM 5.3 MEDIUM
Stop User Enumeration 1.3.8 allows user enumeration via the REST API
CVE-2017-18536 1 Fullworks 1 Stop User Enumeration 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.