The stop-user-enumeration plugin before 1.3.8 for WordPress has XSS.Referenceshttps://wordpress.org/plugins/stop-user-enumeration/#developers
