WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| g*d*t*r*p*u*e*n*.dk 🔒 | 6.4.8 | devdmbootstrap3 | F | — | Jun 6, 2026 |
| e*.l*s*p*y*k*m*.org 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| s*h*a*a*h*a*d.de 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| w*i*g*t*h*i*r*c*s*o*.de 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| h*p*a*o*d*n.club 🔒 | 7.0 | music | F | — | Jun 6, 2026 |
| v*o*e*e*.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| d*r*s*a*i*g.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| v*s*g*m*p*a*.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| v*s*g*m*r.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| w*d*e*d*i.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| d*g*o*s*l*s*a*.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| a*t*a*m*n*c*a*t.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| j*o*v*n*.com 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| n*o*w*o.org | 7.0 | form004 | F | — | Jun 6, 2026 |
| t*s*o*u*s*n.c*.jp | 7.0 | boston | F | — | Jun 6, 2026 |
| b*o*.e*r*s*a*o*f*r*n*e*.com 🔒 | 6.0 | blocksy | D | — | Jun 6, 2026 |
| a*f*l*a*e*a*k*t*n*m*s*e*y.nl 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| f*n*n*i*l*m*e*t*r*.nl 🔒 | 6.6.5 | framework | D | — | Jun 6, 2026 |
| j*a.nyc | Unknown | mies | F | — | Jun 6, 2026 |
| n*w*k*l*d*n*a.e*h*o*a*s*o*.pl 🔒 | 6.8.5 | frost | F | — | Jun 6, 2026 |
| r*z*.p*l*l.pl 🔒 | 5.9.13 | politechnika-v2 | C | — | Jun 6, 2026 |
| p*a*2*2*.p*a*g*a*t*a*i*g.org 🔒 | 7.0 | peak2023 | F | — | Jun 6, 2026 |
| o*c*t*n*e*u*i*b*x.fr 🔒 | 6.4.8 | girondetheme_accueil | F | — | Jun 6, 2026 |
| m*l*a*.tv 🔒 | 7.0 | revolution-press | F | — | Jun 6, 2026 |
| a*p*g.fr 🔒 | 7.0 | catch-box | F | — | Jun 6, 2026 |
| s*o*.c*m.au 🔒 | 7.0 | betheme | B | — | Jun 6, 2026 |
| c*r*s*d*a*e*c*.com 🔒 | 6.8.3 | bricks | F | — | Jun 6, 2026 |
| c*o*r*c*t.ch 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| l*n*i*g*.o*l*n*a*s*s*.me 🔒 | 4.9.12 | twentysixteen | C | — | Jun 6, 2026 |
| b*b*n*n*.com 🔒 | 7.0 | twentytwentyfive | F | — | Jun 6, 2026 |
| b*b*n*k*s.com 🔒 | Unknown | hello-elementor | F | — | Jun 6, 2026 |
| b*b*n*t*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| b*b*n*m*r*a*.com 🔒 | 7.0 | uncode | F | — | Jun 6, 2026 |
| b*b*m*s*c*.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| b*b*m*k*o*.com 🔒 | 7.0 | weluka-theme-00 | F | — | Jun 6, 2026 |
| b*b*m*d.com 🔒 | Unknown | Apkappsbox | D | — | Jun 6, 2026 |
| b*b*m*m*s*c.com 🔒 | Unknown | conference | F | — | Jun 6, 2026 |
| b*b*m*s*k*.com 🔒 | 7.0 | lightning | F | — | Jun 6, 2026 |
| b*b*l*a*r*.com 🔒 | 5.8.13 | twentytwenty | F | — | Jun 6, 2026 |
| b*b*l*m*m*s*c.com 🔒 | 6.9.4 | twentytwentythree | F | — | Jun 6, 2026 |
| x*-*w*q*2*m*o.net 🔒 | 7.0 | diver | F | — | Jun 6, 2026 |
| c*o*e*.n*t.pl 🔒 | 6.8.5 | Unknown | F | — | Jun 6, 2026 |
| d*g*.c*.kr 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| m*x*s*a*e.com 🔒 | 6.9 | maxispace | F | — | Jun 6, 2026 |
| m*g*u*u*l*.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| m*g*n*o*o.com 🔒 | 6.8 | MUGENTOTO | F | — | Jun 6, 2026 |
| m*g*n*d.com 🔒 | 7.0 | maxwin88 | F | — | Jun 6, 2026 |
| m*g*i*v*s*s.com 🔒 | 7.0 | morenews | F | — | Jun 6, 2026 |
| m*f*k*d*.com 🔒 | 7.0 | razzi | F | — | Jun 6, 2026 |
| m*e*e*u*e*v*s.com 🔒 | 7.0 | Avada-Child-Theme | D | — | Jun 6, 2026 |