Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses
2017-01-04 00:00
AnonymousStrategic Overview
StatusPatched in 1.3.5
Affected PluginStop User Enumeration
Affected Version
<= 1.3.4CVSS5.3Medium
CVE
N/AVulnerability Overview
The Stop User Enumeration plugin for WordPress is vulnerable to Username Enumeration Bypasses in versions up to, and including, 1.3.4. This makes it possible for unauthenticated attackers to enumerate lists of valid users that can be used for future attacks.
Technical Analysis
REMEDIATION: Update to version 1.3.5, or a newer patched version --- IDENTIFIER: CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor) The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C