CVE-2025-4302

CVE-2025-4302 is a medium-severity authentication bypass vulnerability affecting the Stop User Enumeration WordPress plugin prior to version 1.7.3. An attacker can bypass the plugin's protection against user enumeration by URL-encoding the REST API path, allowing unauthorized access to user information. The CVSS score is 5.3, indicating a network-based attack with low complexity and a potential impact of unauthorized information disclosure. While not currently in CISA's Known Exploited Vulnerabilities catalog, a Nuclei template exists for exploitation, though there is no evidence of active exploitation or significant community discussion.