CVE-2025-4302 | Stop User Enumeration Plugin up to 1.7.2 on WordPress REST API /wp-json/wp/v2/users/ information exposure

July 17, 2025 Yanac

A vulnerability was found in Stop User Enumeration Plugin up to 1.7.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /wp-json/wp/v2/users/ of the component REST API. The manipulation leads to information exposure through discrepancy.

This vulnerability is known as CVE-2025-4302. The attack can be launched remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More