This page lists publicly disclosed CVE vulnerabilities affecting fullworksplugins stop_user_enumeration (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2025-4302 | The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path. | [email protected] | 5.3 | 1.48% | 2025-07-17 | 2026-01-23 |
| CVE-2017-18536 | The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS. | [email protected] | 6.1 | 2.17% | 2019-08-21 | 2026-01-23 |
| CVE-2017-1000226 | Stop User Enumeration 1.3.8 allows user enumeration via the REST API | [email protected] | 5.3 | 0.42% | 2017-11-17 | 2026-05-13 |