👤 User Enumeration Exposed

⚠️ Security Risk: User enumeration lets attackers discover valid WordPress usernames through the REST API endpoint (/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.