WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| b*c*t*s*m*b*s*c*.com 🔒 | 6.9.4 | hueman | F | — | Jun 6, 2026 |
| b*c*t*s*i*n*e.com 🔒 | 6.8.5 | colormag | F | — | Jun 6, 2026 |
| t*n*s*e*r*v*i*.net 🔒 | Unknown | 2t | A | — | Jun 6, 2026 |
| l*u*e*z*o*t*d*.de 🔒 | 6.9.4 | lay | F | — | Jun 6, 2026 |
| h*s*i*v*r*i*-*e*e*b*g*n.de 🔒 | Unknown | twentyseventeen | D | — | Jun 6, 2026 |
| d*r*t*e*b*e*e*m*r*t.nl 🔒 | 7.0 | flatsome | F | — | Jun 6, 2026 |
| p*l*k*o*a*a.pl 🔒 | Unknown | kadence | D | — | Jun 6, 2026 |
| o*a*a*0*4.pl 🔒 | Unknown | Orawa2024 | F | — | Jun 6, 2026 |
| k*d*.m*r*u*-*e*k*r.de 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| p*r*y.m*r*u*-*e*k*r.de 🔒 | 7.0 | markusbecker | F | — | Jun 6, 2026 |
| t*l*f*n*e*l*o*g*-*l*.de 🔒 | 6.9.4 | telefonseelsorge | F | — | Jun 6, 2026 |
| f*g.nu 🔒 | 7.0 | Total | F | — | Jun 6, 2026 |
| g*u*n*-*e*-*l*.de 🔒 | Unknown | sunflower26 | F | — | Jun 6, 2026 |
| i*n*v*m*n*o*.eu 🔒 | 6.9.4 | enfold | F | — | Jun 6, 2026 |
| a*h*e*e*c*s.eu 🔒 | 6.7.5 | achieveccs | F | — | Jun 6, 2026 |
| e*o*k*l*.sk 🔒 | 7.0 | kids-camp | F | — | Jun 6, 2026 |
| t*i*g*y*u*h*u*d*o.com 🔒 | 6.5.8 | minimer | F | — | Jun 6, 2026 |
| t*i*g*y*u*u*t*n*w.com 🔒 | 6.1.10 | smart-mag | F | — | Jun 6, 2026 |
| t*i*g*y*u*a*l*k*.com 🔒 | Unknown | colorloops | F | — | Jun 6, 2026 |
| t*i*g*w*t*s*r*n*s.com 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| t*i*g*w*m*k*.com 🔒 | 7.0 | kadence | F | — | Jun 6, 2026 |
| t*i*g*w*d*d*t*n*w.com 🔒 | Unknown | perle | F | — | Jun 6, 2026 |
| t*i*g*u*d*r*h*r*y.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| t*i*g*t*t*a*h*o*r*o*.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| t*i*g*t*l*c*t.com 🔒 | Unknown | textbook | F | — | Jun 6, 2026 |
| t*i*g*t*k*i*.com 🔒 | Unknown | theme-thingstoknit | F | — | Jun 6, 2026 |
| t*i*g*t*d*t*e*s*r*i*l*n*.com 🔒 | 6.9.4 | wide-range-lite | F | — | Jun 6, 2026 |
| t*i*g*t*d*r*o*e*.com 🔒 | Unknown | mad_designer | D | — | Jun 6, 2026 |
| t*i*g*t*d*p*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| e*p*d*t*e*a*d*a*.nl 🔒 | 7.0 | oceanwp | F | — | Jun 6, 2026 |
| d*v.m*t*i*d*g*d*f*n.com 🔒 | 7.0 | Avada | F | — | Jun 6, 2026 |
| s*y*e.glass 🔒 | 4.7.29 | hamashin | F | — | Jun 6, 2026 |
| e*i*n*.eu 🔒 | Unknown | windmill | F | — | Jun 6, 2026 |
| i*m*a*e*.com 🔒 | Unknown | Unknown | F | — | Jun 6, 2026 |
| c*i*d*n*s*o*e*a*r*.c*.uk 🔒 | 7.0 | woodmart | F | — | Jun 6, 2026 |
| n*t*c*a*.m*r*o*p*z*o*e*t*d*.com 🔒 | 7.0 | Newspaper | F | — | Jun 6, 2026 |
| b*x*e*g*l.nl 🔒 | 6.9.4 | Unknown | C | — | Jun 6, 2026 |
| d*l*.nl 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| t*c*k*r*e*a*d*n.nl 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| l*r*i*e*n.de 🔒 | 7.0 | generatepress | F | — | Jun 6, 2026 |
| m*s*i*n*s*s*a*n*b*l*t*.org 🔒 | 6.9.4 | hello-elementor | F | — | Jun 6, 2026 |
| e*e*a*k*r*i*.de 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| b*k*k*t*-*o*n*g*b*r*.de | Unknown | twentyseventeen | F | — | Jun 6, 2026 |
| f*r*t*a*e*-*o*e*i*i*n.de 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| b*d*y*m.i*f*.pl 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| f*t*d*s*g*-*a*k*w*a*.de | 6.1.10 | betheme | F | — | Jun 6, 2026 |
| k*i*p*r*b*r*i*.de 🔒 | 7.0 | flatsome | F | — | Jun 6, 2026 |
| s*o*.d*s*r*s*i*a*t.com 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| f*a*c*c*i*a*o*n*a*i*n.org 🔒 | 6.5.5 | dev2 | F | — | Jun 6, 2026 |
| 1*a*l*d*t*o.ru 🔒 | Unknown | 1nasledstvo | F | — | Jun 6, 2026 |