Stop User Enumeration

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 80% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ Luis Feo

   5mo ago

   Excelente. Lo recomiendo. Fine!!

   Read on wp.org ↗
2. ★★★★★ Zinster

   5mo ago

   Very helpful plug-in, thanks for developing it!

   Read on wp.org ↗
3. ★★★★★ poppphoto

   6mo ago

   I have installed this plug-in about a month ago – seems it works fine, I have had no trouble at all.

   Read on wp.org ↗
4. ★★★★★ marliesvaz

   7mo ago

   I love it.

   Read on wp.org ↗
5. ★★★★★ alecos2013

   1.3y ago

   Κάνει αυτό που πρέπει.

   Read on wp.org ↗
6. ★★★★★ jeffw203

   2.0y ago

   I’ve used this for years on dozens of sites. Blocking user enumeration should be a standard option in WordPress core. Until that day, this is the low-footprint plugin you need.

   Read on wp.org ↗
7. ★★★★★ Wasim Shaikh

   2.1y ago

   Nice plugin. This topic was modified 1 year, 12 months ago by Wasim Shaikh.

   Read on wp.org ↗
8. ★★★★★ doffine

   2.3y ago

   We as an agency use this plugin in 250+ WP installations and have made the best experience with its functionality and usability – also on this a bit larger scale. Additionally the support did react exemplary when we had a problem. Our best recommendations. -doffine

   Read on wp.org ↗

8 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 5.3 Stop User Enumeration <= 1.7.2 - Protection Mechanism Bypass ↗
   2025-06-26 CVE-2025-4302 Protection Mechanism Failure Affects <= 1.7.2 Patched in 1.7.3
2. Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
   2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 1.4.1 Patched in 1.4.2
3. High · 8.8 Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update ↗
   2019-02-25 Missing Authorization Affects < 1.3.20 Patched in 1.3.20
4. Medium · 5.3 Stop User Enumeration plugin <1.3.9 - User Enumeration ↗
   2017-05-16 CVE-2017-1000226 Exposure of Sensitive Information to an Unauthorized Actor Affects < 1.3.9 Patched in 1.3.9
5. Medium · 6.1 Stop User Enumeration <= 1.3.7 - Cross-Site Scripting ↗
   2017-01-15 CVE-2017-18536 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.3.8 Patched in 1.3.8
6. Medium · 5.3 Stop User Enumeration <= 1.3.8 - Unauthenticated Username Enumeration ↗
   2017-01-04 CVE-2017-1000226 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.3.8 Patched in 1.3.9
7. Medium · 5.3 Stop User Enumeration <= 1.3.4 - Username Enumeration Bypasses ↗
   2017-01-04 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 1.3.4 Patched in 1.3.5
8. High · 7.3 Stop User Enumeration <= 1.2.4 - Security Bypass ↗
   2014-02-03 Improper Access Control Affects <= 1.2.4 Patched in 1.2.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 9 languages, 3 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2025-02-18 40K+ → 50K+ up after 81 days in tier
2. 2024-11-29 50K+ → 40K+ down after 99 days in tier
3. 2024-08-22 40K+ → 50K+ up after 2 days in tier
4. 2024-08-20 50K+ → 40K+ down after 1 days in tier
5. 2024-08-19 40K+ → 50K+ up after 1 days in tier
6. 2024-08-18 50K+ → 40K+ down after 5 days in tier
7. 2024-08-13 40K+ → 50K+ up after 658 days in tier
8. 2022-10-25 30K+ → 40K+ up after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• W WP Author Security 400+ installs · 4.1★ · 3 shared tags D
• WP fail2ban – Advanced Security 60K+ installs · 4.1★ · 2 shared tags C
• WPScan – WordPress Security Scanner 8K+ installs · 3.8★ · 2 shared tags B
• WP Fail2Ban Redux 7K+ installs · 4.5★ · 2 shared tags C
• WP fail2ban Blocklist 3K+ installs · 4.1★ · 2 shared tags C
• WP fail2ban Add-on for Contact Form 7 800+ installs · 3.6★ · 2 shared tags D

Embed this report card

Drop a live Pulse card for Stop User Enumeration into a readme, a review or a deck. It updates itself.

Stop User Enumeration: 50K+ active installs, 4.9★ (132 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/stop-user-enumeration