Active installations30Adoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Disable User Enumeration version 1.0.0 as active, updated 5y ago and tested up to WordPress 5.5.
Overview
About this plugin
User enumeration can be use for brute-force techniques to either guess or confirm valid users in a system. User enumeration is often a web application vulnerability, though it can also be found in any system that requires user authentication.
An enumeration attack allows a hacker to check whether a name exists in the database. For example, to set up a brute-force attack, rather than searching through login and password pairs, all they need is a matching password for a verified user name, saving time and effort.
The phrase “username harvesting” refers to a vulnerability that when exploited allows people or programs interacting with an application to determine what a valid username is vs an invalid username.
co/wp-json/wp/v2/users that’s it. **
Features:
We only disable for non logged in users.
You can deactivate with single click. No extra configuration required.
Something else about the plugin
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
disable user enumeration
rest api user enumeration
user enumeration
Compatibility & maintenance
Compatibility & maintenance
Tested up to WordPress 5.5
Not yet marked as tested with WordPress 7.1. WordPress.org currently lists Tested up to 5.5.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to5.5
Minimum requirementsWordPress 4.7 · PHP 7.2
Update activity16 Dec 20205y ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
