wpscanteam / wpscan / 36204981417

95%

push

github

Skip WP JSON API users without a slug (#2093)

Some hardening plugins strip the slug from the REST API user objects.
The finder then created users with a nil username, which the JSON view
renders as a `null` object key, making --format json crash with
"invalid object key (must be a string)" and losing the whole scan output.

Fixes #2092

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2124 of 2621 branches covered (81.04%)

1 of 1 new or added line in 1 file covered. (100.0%)

4730 of 4977 relevant lines covered (95.04%)

17244.16 hits per line