Just another contact form plugin. Simple but flexible.
About Stop User Enumeration
Stop User Enumeration is a security plugin that helps protect your website from hackers scanning for user login names. It blocks user enumeration attacks and logs the IP addresses of the attackers, allowing you to block further attacks. It can also be used in conjunction with fail2ban to block attacks at the firewall level.Frequently asked questions
What is Stop User Enumeration?
Stop User Enumeration is a security plugin designed to detect and prevent hackers from scanning your site for user login names. It helps block initial attacks that often precede brute-force password attacks.
How does it help against user enumeration attacks?
The plugin blocks user enumeration requests made via GET or POST. It also logs blocked attempts, which can be used with Fail2Ban to block attack IPs at the server's firewall.
Can it block user data leaks from WordPress APIs?
Yes, it can stop user IDs from being leaked by the oEmbed API call. It also restricts and logs user data obtained through API calls since WordPress 4.5, if not needed.
Does it address user data in sitemaps?
The plugin provides an option to enable or disable the user/author sitemap generated by WordPress core (wp-sitemap.xml) since WordPress 5.5, which exposes user IDs.
Is it compatible with different hosting environments?
While it works powerfully with Fail2Ban on VPS or dedicated servers, it can still be used effectively on shared hosting environments even without Fail2Ban access.
Changelog
1.6.3
- fix warning with die
1.6.2
- set wp_die to return 403
- added defer to script
1.6.1
- updated tested to 6.6
1.6
- change getenv to $_SERVER for better compatability
- added extra sanitization to meet current plugin repo standards
- allow exception for Simple JWT Login rest route and add filters to adjust match and exception of rest rules
1.5.0
- remove admin notifications for reviews and donations
