Title: Ultimate member security issue
Last modified: January 6, 2018

---

# Ultimate member security issue

 *  Resolved [zatur90](https://wordpress.org/support/users/zatur90/)
 * (@zatur90)
 * [8 years, 4 months ago](https://wordpress.org/support/topic/ultimate-member-security-issue/)
 * Hey…
 * I just got an e-mail from my host claiming the Ultimate member plugin has a security
   issue.
 * The plugin is exposing some of the users created on my site simply by opening
   wp-json/wp/v2/users
 * No passwords are being exposed but guess this still is a security issue with 
   brute force attacks etc.
 * Should I worry about this?

Viewing 1 replies (of 1 total)

 *  Plugin Contributor [Champ Camba](https://wordpress.org/support/users/champsupertramp/)
 * (@champsupertramp)
 * [8 years, 4 months ago](https://wordpress.org/support/topic/ultimate-member-security-issue/#post-9844111)
 * Hi [@zatur90](https://wordpress.org/support/users/zatur90/),
 * It is a WP feature. UM doesn’t have to do with it.
 * You can disable that default WP feature with this plugin in the link:
    [https://wordpress.org/plugins/disable-json-api/](https://wordpress.org/plugins/disable-json-api/)
 * Regards,
    -  This reply was modified 8 years, 4 months ago by [Champ Camba](https://wordpress.org/support/users/champsupertramp/).
      Reason: fix typo in mention

Viewing 1 replies (of 1 total)

The topic ‘Ultimate member security issue’ is closed to new replies.

 * ![](https://ps.w.org/ultimate-member/assets/icon-256x256.png?rev=3160947)
 * [Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin](https://wordpress.org/plugins/ultimate-member/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/ultimate-member/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/ultimate-member/)
 * [Active Topics](https://wordpress.org/support/plugin/ultimate-member/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/ultimate-member/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/ultimate-member/reviews/)

 * 1 reply
 * 2 participants
 * Last reply from: [Champ Camba](https://wordpress.org/support/users/champsupertramp/)
 * Last activity: [8 years, 4 months ago](https://wordpress.org/support/topic/ultimate-member-security-issue/#post-9844111)
 * Status: resolved