Lucene search
K

31 matches found

Nuclei
Nuclei
added yesterday19 views

WordPress Stop User Enumeration <=1.3.7 - Cross-Site Scripting

WordPress Stop User Enumeration 1.3.7 and earlier are vulnerable to unauthenticated reflected cross-site scripting. id: CVE-2017-18536 info: name: WordPress Stop User Enumeration =1.3.7 - Cross-Site Scripting author: daffainfo severity: medium description: WordPress Stop User Enumeration 1.3.7 an...

6.1CVSS6AI score0.05223EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2026/01/09 10:33 a.m.7 views

CVE-2017-18536

The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS...

6.1CVSS6.9AI score0.05223EPSS
Exploits1References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-9652

Malware in sbrugna...

6.1CVSS6.3AI score0.05223EPSS
Exploits1References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2025-21758

Malicious code in bioql PyPI...

5.3CVSS6.4AI score0.01448EPSS
Exploits1References1
CNVD
CNVD
added 2025/07/23 12:0 a.m.2 views

Unspecified Vulnerability in WordPress Stop User Enumeration plugin

WordPress Stop User Enumeration plugin is a security plugin for WordPress, mainly used to detect and prevent hackers from scanning website usernames user enumeration attack to get the login name, which is the pre-detection behavior of brute force password cracking attack. A security vulnerability...

5.3CVSS6.8AI score0.01448EPSS
Exploits1References1
OSV
OSV
added 2025/07/17 8:15 a.m.3 views

CVE-2025-4302

The Stop User Enumeration WordPress plugin before version 1.7.3 blocks REST API /wp-json/wp/v2/users/ requests for non-authorized users. However, this can be bypassed by URL-encoding the API path...

5.3CVSS5.8AI score
Exploits0References1
CNNVD
CNNVD
added 2025/07/17 12:0 a.m.4 views

WordPress plugin Stop User Enumeration 安全漏洞

WordPress Stop User Enumeration plugin is a security plugin for WordPress, mainly used to detect and prevent hackers from scanning website usernames user enumeration attack to get the login name, which is the pre-detection behavior of brute force password cracking attack. A security vulnerability...

5.3CVSS6.7AI score0.01448EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:6 a.m.3 views

CVE-2017-1000226

Stop User Enumeration 1.3.8 allows user enumeration via the REST API...

5.3CVSS7AI score0.00424EPSS
Exploits1References1
OSV
OSV
added 2024/09/18 6:15 a.m.1 views

CVE-2024-6641

The WP Hardening – Fix Your WordPress Security plugin for WordPress is vulnerable to Security Feature Bypass in all versions up to, and including, 1.2.6. This is due to use of an incorrect regular expression within the "Stop User Enumeration" feature. This makes it possible for unauthenticated...

5.3CVSS5.6AI score
Exploits0References2
CVE
CVE
added 2024/09/18 5:31 a.m.46 views

CVE-2024-6641

The CVE describes a vulnerability in the WordPress plugin WP Hardening – Fix Your WordPress Security, affecting all versions up to 1.2.6. Root cause: an incorrect regular expression in the Stop User Enumeration feature, enabling unauthenticated attackers to bypass security checks and reveal site ...

5.3CVSS5.7AI score0.00342EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/17 12:0 a.m.3 views

PT-2024-37770 · WordPress · Wp Hardening – Fix Your Wordpress Security

Name of the Vulnerable Software and Affected Versions: The WP Hardening – Fix Your WordPress Security plugin versions up to, and including, 1.2.6 Description: The issue is due to the use of an incorrect regular expression within the "Stop User Enumeration" feature, making it possible for...

5.3CVSS7.3AI score0.00342EPSS
Exploits0References7
VulnCheck KEV
VulnCheck KEV
added 2024/07/25 12:0 a.m.2 views

VulnCheck KEV: CVE-2017-1000226

Stop User Enumeration 1.3.8 allows user enumeration via the REST API...

5.3CVSS5.8AI score0.00424EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/02/28 12:0 a.m.1 views

WordPress Plugin Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress Plugin Disable Json API, Login...

4.3CVSS6.7AI score0.00117EPSS
Exploits0References3
NVD
NVD
added 2023/12/28 11:15 a.m.8 views

CVE-2023-50858

Cross-Site Request Forgery CSRF vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: from n/a through 4.34...

8.8CVSS0.00055EPSS
Exploits0References1
Prion
Prion
added 2023/12/28 11:15 a.m.17 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: from n/a through 4.34...

6.8CVSS7.2AI score0.00055EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2023/12/28 10:31 a.m.66 views

CVE-2023-50858

CVE-2023-50858 is described as a CSRF vulnerability affecting the WordPress plugin antihacker (Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan). The supplied documents do not include concrete technical details (payloads, affected versions, root cause, im...

8.8CVSS8.5AI score0.00055EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/28 10:31 a.m.24 views

CVE-2023-50858 WordPress Anti Hacker Plugin <= 4.34 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This issue affects Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan: from n/a through 4.34...

5.4CVSS8.9AI score0.00055EPSS
Exploits0References1
CNVD
CNVD
added 2019/08/23 12:0 a.m.6 views

WordPress stop-user-enumeration plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. stop-user-enumeration is a plugin that is used to protect against site user enumeration attacks. A cross-site scripting vulnerability...

6.1CVSS6.2AI score0.05223EPSS
Exploits1References1
NVD
NVD
added 2019/08/21 12:15 p.m.13 views

CVE-2017-18536

The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS...

6.1CVSS6.4AI score0.05223EPSS
Exploits1References1
OSV
OSV
added 2019/08/21 12:15 p.m.1 views

CVE-2017-18536

The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS...

6.1CVSS5.8AI score
Exploits0References1
Rows per page
Query Builder