Skip to content

Known CVE

Stop User Enumeration WordPress plugin - Authentication Bypass

Stop User Enumeration WordPress plugin < 1.7.3 contains an authentication bypass caused by URL-encoding the REST API path /wp-json/wp/v2/users/, letting attackers bypass user enumeration restrictions, exploit requires crafted URL encoding.

CVE-2025-4302

Medium2025CVSS 5.3

cve2025 · wordpress · wp-plugin · wp · wpscan · stop-user-enumeration · vuln

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website