Approved changes feed: RSS · Atom

cpe:2.3:a:fullworksplugins:stop_user_enumeration:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorFullworksplugins (0773bc17-3ee0-59b1-bb7e-c57f8e81b933)
ProductStop User Enumeration (1a60fb5a-a97b-5c56-8f8b-c0d714bd3ec8)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-4302 vulnerable 2026-06-08 07:29:16.002018 Stop User Enumeration < 1.7.3 - Protection Bypass
The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path.
Published: 2025-07-17T07:37:11.729Z
Updated: 2025-07-17T13:36:10.039Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-18536 vulnerable 2026-06-08 05:09:11.225653 Details available
The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.
Published: 2019-08-21T11:40:37.000Z
Updated: 2024-08-05T21:28:54.937Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.