Ultimate member security issue
-
Hey…
I just got an e-mail from my host claiming the Ultimate member plugin has a security issue.
The plugin is exposing some of the users created on my site simply by opening wp-json/wp/v2/users
No passwords are being exposed but guess this still is a security issue with brute force attacks etc.
Should I worry about this?
Viewing 1 replies (of 1 total)
-
Hi @zatur90,
It is a WP feature. UM doesn’t have to do with it.
You can disable that default WP feature with this plugin in the link:
https://wordpress.org/plugins/disable-json-api/Regards,
Viewing 1 replies (of 1 total)
The topic ‘Ultimate member security issue’ is closed to new replies.
