WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| r*y*r*o*t*e*a*y.c*m.au 🔒 | Unknown | astra | D | — | Jun 6, 2026 |
| p*r*o*a*e*r*c*m*n*s*r*i*e*.c*m.au 🔒 | Unknown | pes-whitespace-pro | F | — | Jun 6, 2026 |
| p*c*m*w*r*.com 🔒 | 6.9.4 | Avada | F | Jun 6, 2026 | |
| b*o*.n*t*o*k*o*o*e.com 🔒 | Unknown | network-to-code | F | — | Jun 6, 2026 |
| l*u*e.fi 🔒 | 6.3.8 | ifg_basic | C | — | Jun 6, 2026 |
| m*k*r*p*c*.o*n*a.fi 🔒 | 6.9.4 | hello-elementor | F | — | Jun 6, 2026 |
| c*a*h*n*c*m*a*y.fi 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| k*i*a*.t*s*u*a*t*i.com 🔒 | 7.0 | twentytwentyfour | F | — | Jun 6, 2026 |
| d*n*c*v*r*t*n*.org 🔒 | 7.0 | oceanwp | F | — | Jun 6, 2026 |
| e*c*c*o*e*i*.k*u*h*.online 🔒 | 7.0 | rise | D | — | Jun 6, 2026 |
| h*u*e*f*s*a.org | 4.9.3 | betheme | F | — | Jun 6, 2026 |
| u*e*i.pl 🔒 | 6.8.3 | Unknown | F | — | Jun 6, 2026 |
| d*i*o*g*l*k*e.pl 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| d*s*i*l*-*f*.shop 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| n*w.c*a*n*y*c*o*l.com 🔒 | 7.0 | chauncy | F | — | Jun 6, 2026 |
| d*n*e*p*y*e.c*.uk 🔒 | 5.8.13 | sydney | F | — | Jun 6, 2026 |
| y*r*s*i*e*e*t*e*c*.c*.uk 🔒 | 7.0 | kadence | F | — | Jun 6, 2026 |
| 2*h*i*i.a*a.c*.jp 🔒 | Unknown | custom_theme | D | — | Jun 6, 2026 |
| a*a*a*r*c*l*u*e*c*u*.com 🔒 | Unknown | anaac | F | — | Jun 6, 2026 |
| t*a*e*t*v*a*d*i*e*l*c*p*o*e*s*o*a*s*o*.com 🔒 | 7.0 | royal-elementor-kit | F | — | Jun 6, 2026 |
| f*p*.t*.e*u.tw 🔒 | 6.8.5 | twentytwentyone | F | Jun 6, 2026 | |
| w*n*y*i*l*a*c*u*r*.nz 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| l*a*x.c*m.au 🔒 | 6.9.4 | astra | F | — | Jun 6, 2026 |
| d*s*n*a*w*r*i*r.c*m.au 🔒 | 6.9.4 | drsanjaywarrier | D | — | Jun 6, 2026 |
| a*s*r*l*a*t*l*t*i*l*r*g*a*.g*v.au 🔒 | Unknown | hello-elementor | F | — | Jun 6, 2026 |
| h*r*o*e*o*i*s*e*.nl 🔒 | 7.0 | arkdesign | C | — | Jun 6, 2026 |
| 1*1*b*u*i*u*.c*.uk 🔒 | Unknown | bb-theme-child | F | — | Jun 6, 2026 |
| c*i*.p*u.a*.th 🔒 | Unknown | plant | A | — | Jun 6, 2026 |
| f*s*l*n*r.de 🔒 | 6.9.4 | astra | A | — | Jun 6, 2026 |
| t*s*r*u*l*n*e*.de 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| a*d*e*s*o*c*.info 🔒 | Unknown | miko | F | — | Jun 6, 2026 |
| d*g*t*l*d*o*u*.pl 🔒 | 7.0 | genesisexpo | F | — | Jun 6, 2026 |
| a*s*d*o.sk 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| j*s*o*p.eu 🔒 | 6.9.4 | refur | F | — | Jun 6, 2026 |
| m*t*r*a*i*n.s*r*i*c*l*r*e*.de 🔒 | 7.0 | witaj | F | — | Jun 6, 2026 |
| b*b*c*a*t*l.com 🔒 | 7.0 | baby | F | — | Jun 6, 2026 |
| b*b*c*n*e*c*l*m*i*.com 🔒 | 7.0 | blocksy | F | — | Jun 6, 2026 |
| b*b*c*t*o*.com 🔒 | 7.0 | stylish-travel-blog | F | — | Jun 6, 2026 |
| b*b*c*t*r*w*r*.com 🔒 | Unknown | Unknown | D | — | Jun 6, 2026 |
| b*b*c*s*n*n*t.com 🔒 | 7.0 | vilva | F | — | Jun 6, 2026 |
| b*b*c*r*o*i*a*.com 🔒 | 7.0 | twentytwentytwo | F | — | Jun 6, 2026 |
| b*b*c*r*z.com 🔒 | Unknown | avanam | D | — | Jun 6, 2026 |
| b*b*c*r*n*.com 🔒 | Unknown | avanam | F | — | Jun 6, 2026 |
| b*b*c*r*m*l*a.com 🔒 | Unknown | astra | D | — | Jun 6, 2026 |
| b*b*c*r*a*s*e*s.com 🔒 | Unknown | viral-news | F | — | Jun 6, 2026 |
| b*b*c*r*0*1*.com 🔒 | Unknown | cocoon-master | F | — | Jun 6, 2026 |
| v*r*e*r*t*i*.info 🔒 | 7.0 | twentytwentyfive | F | — | Jun 6, 2026 |
| w*n*e*w*r*l*.nl 🔒 | 7.0 | dt-the7 | F | — | Jun 6, 2026 |
| a*e*i*t*c*.com 🔒 | 7.0 | elementra | F | — | Jun 6, 2026 |
| a*p*v*.fr 🔒 | Unknown | afpsvt | F | — | Jun 6, 2026 |