Cross site scripting

The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS...

CVE-2017-18536

CVE-2017-18536 affects the WordPress plugin “Stop User Enumeration” (before version 1.3.8). The vulnerability is an unauthenticated reflected cross-site scripting (XSS) in the plugin, exploited via user-supplied input (e.g., author parameter) that can execute script in a victim’s browser. Impact ...

PT-2019-8470

Name of the Vulnerable Software and Affected Versions WordPress stop-user-enumeration plugin versions prior to 1.3.8 Description The issue concerns a cross-site scripting XSS problem. Recommendations For versions prior to 1.3.8, update to version 1.3.8 or later to resolve the issue...

WordPress Stop User Enumeration plugin <=1.3.19 - Authenticated Option Update vulnerability (Fremius Library security issue)

Authenticated Option Update vulnerability Fremius Library security issue found in WordPress Stop User Enumeration plugin versions =1.3.19. Solution Update the WordPress Stop User Enumeration plugin to the latest available version at least 1.3.20...

WordPress Stop User Enumeration User Enumeration Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports personal blog sites on PHP and MySQL servers.Stop User Enumeration is one of the plug-ins used to stop user enumeration. A user enumeration vulnerability exists in...

CVE-2017-1000226

Stop User Enumeration 1.3.8 allows user enumeration via the REST API...

CVE-2017-1000226

The CVE-2017-1000226 entry concerns WordPress Stop User Enumeration plugin version 1.3.8. The available connected data indicate a vulnerability that allows user enumeration via the REST API. The issue is described consistently across sources as stemming from the REST interface exposing username i...

PT-2017-10922

Name of the Vulnerable Software and Affected Versions Stop User Enumeration version 1.3.8 Description The issue allows user enumeration via the REST API. Recommendations For version 1.3.8, consider disabling the REST API until a patch is available to prevent user enumeration...

Stop User Enumeration 1.3.5-1.3.7 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The Stop User Enumeration WordPress plugin was affected by an Unauthenticated Reflected Cross-Site Scripting XSS security vulnerability. PoC http://www.example.com/?author=1...

Stop User Enumeration <= 1.3.3 - Username Enumeration Bypass

Using the plugin "Stop User Enumeration 1.3.3" is possible bypass it to get the usernames. PoC Blocked: http://www.example.com/?author%00=%001 Passed: http://www.example.com/?bypass=1%00=1...

WordPress Stop User Enumeration Security Bypass Vulnerability

WordPress Stop User Enumeration Plugin is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...