User Enumeration Vulnerability in Stop User Enumeration Plugin by WordPress
CVE-2017-1000226

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Stop User Enumeration
Vendor
CVE Published:
3 October 2022

What is CVE-2017-1000226?

The Stop User Enumeration plugin version 1.3.8 has a flaw that allows attackers to enumerate users through the REST API. This vulnerability can be exploited to gain insights into the user accounts of a WordPress site, which may lead to further attacks. It is crucial for site administrators to review their security measures and apply necessary patches to mitigate this issue.

References

https://security.dxw.com/advisories/stop-user-enumeration...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.