Medium
CVSS 5.3
Overview
The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path.
CVE-2025-4302
The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API ...
Risk analysis
This vulnerability is rated 🟡 MEDIUM.
- CVSS: 5.3 (MEDIUM)
- Detected tags: wordpress (tag impact: LOW)
Recommended actions:
- Prioritize remediation based on business criticality and exposure.
- Limit exposure and increase monitoring until fixed.