Known CVE
Stop User Enumeration WordPress plugin - Authentication Bypass
Stop User Enumeration WordPress plugin < 1.7.3 contains an authentication bypass caused by URL-encoding the REST API path /wp-json/wp/v2/users/, letting attackers bypass user enumeration restrictions, exploit requires crafted URL encoding.
CVE-2025-4302
Medium2025CVSS 5.3
cve2025 · wordpress · wp-plugin · wp · wpscan · stop-user-enumeration · vuln
Verified scans run this check after you prove you own the site.
All known CVEsView the checks catalogNational Vulnerability Database
Scan a website