WordPress Plugin Vulnerabilities

Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses

Description

The Stop User Enumeration WordPress plugin was affected by an Username Enumeration Bypasses security vulnerability.

Affects Plugins

Plugin icon
stop-user-enumeration
Fixed in 1.3.5

References

URL
https://seclists.org/fulldisclosure/2017/Jan/10
URL
https://advisories.dxw.com/advisories/stop-user-enumeration-does-not-stop-user-enumeration/

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
8ae7958c-26e9-4caf-8a8b-cf1d2e6410a0

Timeline

Publicly Published
2017-01-04 (about 9 years ago)
Added
2017-01-08 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2026-02-06
Title
Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass
Published
2016-12-08
Title
WooCommerce Email Test 1.5 - Order Information Disclosure
Published
2015-03-12
Title
Custom Field Suite <= 2.4 - Insufficient Authorisation
Published
2019-05-29
Title
ConvertPlus <= 3.4.2 - Unauthenticated Arbitrary User Role Creation
Published
2022-08-08
Title
Stop Spam Comments <= 0.2.1.2 - Access Token Bypass