WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

👤 User Enumeration Exposed

WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.

👤 45,129 sites leaking usernames
⚠️ Security Risk: User enumeration lets attackers discover valid WordPress usernames through the REST API endpoint (/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
Domain WP Version Theme Headers Other Issues Last Scanned
g*e*s*-*r*p*i*s*a*l*t*o*-*r*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
l*a*-*e*e*t*o*-*r*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*l*-*r*l*i*g*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*w*r*l*n*-*e*a*r*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*w*r*l*n*-*a*k*p*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*s*i*s*a*l*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*l*n*-*n*t*l*a*i*n*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*l*n*-*e*a*r*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*h*a*e*-*e*a*r*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*h*a*e*-*n*t*l*a*i*n*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*t*e*-*e*a*r*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*t*e*-*l*a*i*g*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
r*p*p*n*-*r*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
t*i*e*-*n*t*l*a*i*n*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*n*-*e*a*r*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
d*a*n*r*p*i*-*r*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
d*a*n*c*e*n*n*-*r*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*r*a*e*d*s*o*a*-*e*a*r*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*t*t*b*i*s*a*l*t*o*-*r*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*t*t*b*r*f*n*s*i*g*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
t*i*e*-*e*a*r*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
f*u*e*-*e*a*r*t*o*k*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
p*p*-*i*i*g*s*w*r*r*p*i*-*t*c*t*n*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
f*e*c*-*r*i*-*n*t*l*a*i*n*s*o*k*o*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*c*f*o*-*r*v*n*i*n*s*o*k*o*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*c*f*o*-*e*a*r*s*o*k*o*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*e*n*p*u*b*n*-*t*c*t*n*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*l*-*u*p*r*p*i*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*l*-*r*l*i*g*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*w*r*c*e*n*n*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*w*r*l*n*-*a*k*p*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*p*i*-*e*v*c*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*e*s*-*r*p*c*e*n*n*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*s*r*p*i*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*s*i*s*a*l*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*l*n*-*n*t*l*a*i*n*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*h*a*e*-*e*a*r*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
v*d*o*p*p*-*n*p*c*i*n*s*r*i*e*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*t*e*-*e*a*r*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*t*e*-*l*a*i*g*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
t*i*e*-*n*t*l*a*i*n*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*n*-*n*t*l*a*i*n*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*t*t*b*s*o*e*-*e*a*r*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*o*e*-*n*t*l*a*i*n*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
p*u*b*n*-*n*p*c*i*n*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
d*a*n*r*p*i*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
d*a*n*c*e*n*n*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*t*t*b*i*s*a*l*t*o*-*w*g*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
t*i*e*-*e*a*r*t*i*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
p*p*-*i*i*g*s*w*r*r*p*i*-*r*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
Copyright 2026, tldwp.com. All rights reserved. WordPress OSINT or security needs? Reach out!