WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| a*s*s*a*c*.lu 🔒 | 7.0 | theme-assistance | F | — | Jun 6, 2026 |
| m*c*t.org 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| t*u*i*g.gy 🔒 | 6.7.2 | traveler | F | — | Jun 6, 2026 |
| k*r*.s*a*t.b*r*i*h*t*.at 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| l*a*a*a*.com | 5.0.19 | child | F | — | Jun 6, 2026 |
| m*m*r*a*c*n*r*f*r*e*s*a*k*t.ca 🔒 | Unknown | ignition-business3ree | F | — | Jun 6, 2026 |
| t*e.f*t.guide 🔒 | Unknown | blockbase | F | — | Jun 6, 2026 |
| b*b*8*-*o*n*o*d.com 🔒 | Unknown | betwinnerlive | F | — | Jun 6, 2026 |
| b*b*e*a*a*i*.com 🔒 | 7.0 | astra | F | — | Jun 6, 2026 |
| b*b*w*c*e*t*i*h*i*.com 🔒 | 7.0 | Avada | F | — | Jun 6, 2026 |
| b*b*w*b*e*.com 🔒 | Unknown | mad_designer | F | — | Jun 6, 2026 |
| b*b*e*n*.com 🔒 | 7.0 | bricks | F | — | Jun 6, 2026 |
| b*b*e*n*l*j*.com 🔒 | Unknown | Bab | F | — | Jun 6, 2026 |
| b*b*-*8*o*i*.com 🔒 | 6.9.4 | reboot | F | — | Jun 6, 2026 |
| b*b*8*-*p*.com 🔒 | 6.7.5 | reboot | F | — | Jun 6, 2026 |
| b*b*8*-*a*i*o*n*w.com 🔒 | 7.0 | twentytwentyfive | F | — | Jun 6, 2026 |
| b*b*8*-*a*g*a*e*h.com 🔒 | 7.0 | astra | D | — | Jun 6, 2026 |
| b*b*-*8*e*.com 🔒 | 6.7.5 | reboot | F | — | Jun 6, 2026 |
| b*b*t*n*r*l*u*g*r*.com 🔒 | 6.9.4 | astra-child | F | — | Jun 6, 2026 |
| b*b*s*v*g*m*s*c.com 🔒 | 7.0 | twentytwentytwo | F | — | Jun 6, 2026 |
| b*b*r*m*r*n*.com 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| b*b*p*o*e*t*.com 🔒 | 7.0 | mai-delight | F | — | Jun 6, 2026 |
| b*b*o*p*r*m*v*r*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| b*b*o*l*w*f*i*e.com 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| f*0*c*f*1*.n*c*i.net 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| v*r*i*n.so 🔒 | Unknown | generatepress | F | — | Jun 6, 2026 |
| a*t*-*r*i*e.com 🔒 | 7.0 | blocksy | A | — | Jun 6, 2026 |
| d*c*.v*n*u*e*v*n*m*n*g*r.com 🔒 | 6.8.1 | generatepress | F | — | Jun 6, 2026 |
| m*c*e*l*w*c*i*a*s*a*a.com 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| t*e*a*h*t*h.com 🔒 | 7.0 | blocksy | F | — | Jun 6, 2026 |
| l*c*l*u*n*r*p*d*a*t.c*.uk 🔒 | 7.0 | twentytwentyfive | F | — | Jun 6, 2026 |
| i*s*d*r*h*e*t.m*t*e.org 🔒 | Unknown | Divi | C | — | Jun 6, 2026 |
| s*j*.se 🔒 | 7.0 | in-conference | F | — | Jun 6, 2026 |
| b*t*e*2.de 🔒 | Unknown | efgadt | F | — | Jun 6, 2026 |
| e*e*g*m*.cz 🔒 | 7.0 | hello-elementor | F | — | Jun 6, 2026 |
| g*o*a*-*a*y*e*.cz 🔒 | Unknown | cpm-fortune | D | — | Jun 6, 2026 |
| y*k*d*r*m*p*o.j*n.org 🔒 | Unknown | cocoon-master | F | — | Jun 6, 2026 |
| h*n*o*.j*n.org 🔒 | Unknown | cocoon-master | F | — | Jun 6, 2026 |
| t*n*a*.g*m*i*v*t*e*v*c*.c*m.au 🔒 | Unknown | bricks | C | — | Jun 6, 2026 |
| p*b*i*-*o*n*i*.k*v*d*.ru 🔒 | 6.9.4 | public-council | F | — | Jun 6, 2026 |
| s*l*n.m*e*t*o*a*o*.pl 🔒 | 6.8.2 | ultrabootstrap | F | — | Jun 6, 2026 |
| p*m.n*t.au 🔒 | 6.9.4 | twentytwentyfive | F | — | Jun 6, 2026 |
| b*o*.t*l*b*.com 🔒 | Unknown | Divi | F | — | Jun 6, 2026 |
| n*t*i*e.it 🔒 | Unknown | trs | F | — | Jun 6, 2026 |
| t*e*t*r*e*e*.org 🔒 | 6.8.5 | mh-magazine-lite | F | — | Jun 6, 2026 |
| l*v*r*s*d*l*g*r*e*s.b*c*n.net 🔒 | Unknown | aspen | D | — | Jun 6, 2026 |
| i*.u*r.e*u.pl 🔒 | 6.9.1 | pozostale-jednostki | B | — | Jun 6, 2026 |
| t*e*o*d*e*e*.com 🔒 | 7.0 | wisteria-trellis | F | — | Jun 6, 2026 |
| t*e*o*d*a*i*n*u*.com 🔒 | Unknown | atelier | F | — | Jun 6, 2026 |
| t*e*o*d*u*f*i*e*.com 🔒 | Unknown | newscard | D | — | Jun 6, 2026 |