WordPress Plugin Vulnerabilities

Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass

Description

Using the plugin "Stop User Enumeration 1.3.3" is possible bypass it to get the usernames.

Proof of Concept

Affects Plugins

Plugin icon
stop-user-enumeration
Fixed in 1.3.4

References

URL
https://plugins.trac.wordpress.org/changeset/1390935/stop-user-enumeration

Miscellaneous

Submitter
Carlos Montiers Aguilera
Verified
No
WPVDB ID
8e6e5bd9-4a4d-4b0f-9885-f9f13beb422a

Timeline

Publicly Published
2016-04-01 (about 10 years ago)
Added
2016-04-11 (about 10 years ago)
Last Updated
2019-10-31 (about 6 years ago)

Other

Published
Title
Published
2026-02-06
Title
Advanced Country Blocker <= 2.3.1 - Unauthenticated Authorization Bypass
Published
2018-05-10
Title
BBE Theme < 1.53 - Direct Object Reference
Published
2015-01-22
Title
Pagelines Theme <= 1.4.5 - Privilege escalation
Published
2025-06-26
Title
Stop User Enumeration < 1.7.3 - Protection Bypass
Published
2022-08-17
Title
Titan Anti-spam & Security < 7.3.1 - Protection Bypass due to IP Spoofing