CVE-2025-4302 — Stop User Enumeration < 1.7.3 - Protection Bypass

CVE-2025-4302

Stop User Enumeration < 1.7.3 - Protection Bypass PUBLISHED

Description (CNA)

The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path.

Affected (CNA)

Vendor / product	Versions
Unknown / Stop User Enumeration	affected 0 before 1.7.3

CWE

No CWE identifiers supplied.

References

https://wpscan.com/vulnerability/19f67d6e-4ffe-4126-ac42-fb23c5017a3e

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.