WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| c*s*l*g*o*p.ie 🔒 | 7.0.2 | Avada-Child-Theme | F | — | Jul 27, 2026 |
| w*l*i*m*o*t*h*u*e.o*g.uk 🔒 | 7.0.2 | flatsome | F | — | Jul 27, 2026 |
| n*r*h*h*r*r*c*r*a.org 🔒 | Unknown | athene-north-shore | F | — | Jul 27, 2026 |
| r*a*r*c*e*b*c*.com 🔒 | Unknown | poema | F | — | Jul 27, 2026 |
| r*a*r*c*a*d*o*b*r*e*t.com 🔒 | 7.0.2 | pineapple-wpex | F | — | Jul 27, 2026 |
| r*a*r*y*o*d*w*r*o*t*.com 🔒 | 7.0.2 | radiate | F | — | Jul 27, 2026 |
| r*a*r*s*a*c*.com 🔒 | 7.0.2 | deon | F | — | Jul 27, 2026 |
| r*a*r*n*e*.com 🔒 | 7.0.2 | kadence | C | — | Jul 27, 2026 |
| r*a*r*m*v*l*.com 🔒 | Unknown | Unknown | F | — | Jul 27, 2026 |
| r*a*r*c*u*t*e*t.com 🔒 | Unknown | astra | F | — | Jul 27, 2026 |
| r*a*r*a*e*t*t*s*r*i*e*.com 🔒 | 7.0.2 | astra | F | — | Jul 27, 2026 |
| r*a*r*n*e*.com 🔒 | Unknown | Avada | F | — | Jul 27, 2026 |
| r*a*r*m*s*a.com 🔒 | 7.0.2 | seedlet | F | — | Jul 27, 2026 |
| r*a*q*r*e*o*k.com 🔒 | Unknown | op-smart-theme3 | F | — | Jul 27, 2026 |
| l*n*e*s*i*l*r.com 🔒 | Unknown | kalium | F | Jul 27, 2026 | |
| l*n*e*s*e*a*.com 🔒 | Unknown | Divi | F | — | Jul 27, 2026 |
| l*n*e*s*o*e*e*v*c*s.com 🔒 | 7.0.2 | hello-elementor | F | — | Jul 27, 2026 |
| h*i*i*a*l*r*.ch 🔒 | Unknown | Divi | F | — | Jul 27, 2026 |
| l*n*e*s*a*f*j*.com 🔒 | 7.0.2 | hello-elementor | F | — | Jul 27, 2026 |
| l*n*e*o*i*n*.com 🔒 | 7.0.2 | hello-elementor | F | — | Jul 27, 2026 |
| l*n*e*n*a*f*.com 🔒 | 7.0.2 | hello-elementor | F | — | Jul 27, 2026 |
| l*n*e*m*a*s.com 🔒 | 6.4.2 | Unknown | F | — | Jul 27, 2026 |
| l*n*e*g*l*c*u*s*.com 🔒 | Unknown | Divi | F | — | Jul 27, 2026 |
| l*n*e*f*l*f*s*i*a*.com 🔒 | 7.0.2 | blocksy | F | — | Jul 27, 2026 |
| l*n*e*d*e*.com 🔒 | 6.9.5 | ziomm | F | — | Jul 27, 2026 |
| l*c*s*r*i*e.de 🔒 | Unknown | twentytwentyone | F | — | Jul 27, 2026 |
| c*n*i*o*.com 🔒 | Unknown | ninja | F | — | Jul 27, 2026 |
| c*n*e*h.com 🔒 | 7.0.2 | astra | F | — | Jul 27, 2026 |
| c*n*c*a*s*c*u*i*r.com 🔒 | 6.7.2 | hello-elementor | F | — | Jul 27, 2026 |
| c*n*a*r*.com 🔒 | 7.0.2 | fortuna | F | — | Jul 27, 2026 |
| m*d*r*m*n*e*t.ru 🔒 | 7.0.2 | medprom | F | — | Jul 27, 2026 |
| u*d*r*o*.clinic 🔒 | 7.0.2 | dltheme | F | — | Jul 27, 2026 |
| p*c*i*i*.ru 🔒 | Unknown | apple | F | — | Jul 27, 2026 |
| t*a*e*c*r*9.ru 🔒 | 7.0.2 | flatsome | F | — | Jul 27, 2026 |
| v*-*m*a*z*i*n*.ru 🔒 | 6.3.8 | ryse | F | — | Jul 27, 2026 |
| p*i*r*t*t*i*g*o*t*c*.ru 🔒 | Unknown | prioritet | F | — | Jul 27, 2026 |
| d*c*o*-*n*a.ru 🔒 | Unknown | da | F | — | Jul 27, 2026 |
| t*t*o*-*o*e*t.com 🔒 | 7.0.2 | savoy | F | — | Jul 27, 2026 |
| t*t*o*-*a*a.com 🔒 | Unknown | swell | F | — | Jul 27, 2026 |
| t*t*o*-*o*s*l*i*g.com 🔒 | 6.3.8 | west-pro | F | — | Jul 27, 2026 |
| t*t*o*i*t*r*a*i*n*l.com 🔒 | 7.0.2 | consultox | F | — | Jul 27, 2026 |
| a*t*p*h*a*w*l*n*s*.com 🔒 | Unknown | Unknown | F | — | Jul 27, 2026 |
| a*t*p*h*a*s*o*t*.com 🔒 | Unknown | asasports | F | — | Jul 27, 2026 |
| a*t*p*b*v*m*n*.com 🔒 | 7.0.2 | Avada-Child-Theme | F | — | Jul 27, 2026 |
| a*g*t*c*n*l*g*e*.fr 🔒 | Unknown | Divi | F | — | Jul 27, 2026 |
| a*g*g*r*a*y.de 🔒 | 7.0.2 | generatepress | F | — | Jul 27, 2026 |
| a*f*r*i*.net 🔒 | Unknown | dt-the7 | F | — | Jul 27, 2026 |
| c*r*s*l*k.org 🔒 | 7.0.2 | astra | F | — | Jul 27, 2026 |
| c*s*h*g*-*e*h.fr 🔒 | Unknown | Divi | F | — | Jul 27, 2026 |
| n*x*e*h.dk 🔒 | 7.0.2 | twentytwentyfour | F | — | Jul 27, 2026 |