WordPress OSINT, maintenance or security needs? Reach out!
TLDWP

👤 User Enumeration Exposed

WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.

👤 46,582 sites leaking usernames
⚠️ Security Risk: User enumeration lets attackers discover valid WordPress usernames through the REST API endpoint (/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
Domain WP Version Theme Headers Other Issues Last Scanned
d*a*n*c*e*n*n*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
d*a*n*r*p*i*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
p*u*b*n*-*n*p*c*i*n*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*o*e*-*n*t*l*a*i*n*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*t*t*b*s*o*e*-*e*a*r*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*n*-*n*t*l*a*i*n*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*n*-*e*a*r*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
t*i*e*-*n*t*l*a*i*n*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
r*p*p*n*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*t*e*-*l*a*i*g*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*h*a*e*-*n*t*l*a*i*n*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*h*a*e*-*e*a*r*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*l*n*-*e*a*r*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*l*n*-*n*t*l*a*i*n*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*s*i*s*a*l*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*e*s*-*r*p*c*e*n*n*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*p*i*-*e*v*c*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*w*r*l*n*-*a*k*p*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*w*r*l*n*-*e*a*r*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*w*r*c*e*n*n*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*l*-*r*l*i*g*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*l*-*u*p*r*p*i*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
l*a*-*e*e*t*o*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*e*s*-*r*p*i*s*a*l*t*o*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
k*t*h*n*p*u*b*n*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*a*-*e*k*d*t*c*i*n*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
t*n*l*s*-*a*e*-*e*t*r*i*s*a*l*t*o*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*e*n*p*u*b*n*-*l*m*u*h*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*c*f*o*-*e*a*r*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*c*f*o*-*r*v*n*i*n*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
f*e*c*-*r*i*-*n*t*l*a*i*n*p*y*o*t*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
t*i*e*-*e*a*r*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*t*t*b*r*f*n*s*i*g*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*t*t*b*i*s*a*l*t*o*-*a*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*r*a*e*d*s*o*a*-*e*a*r*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
p*u*b*n*-*n*p*c*i*n*-*a*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*o*e*-*n*t*l*a*i*n*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
b*t*t*b*s*o*e*-*e*a*r*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*n*-*n*t*l*a*i*n*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
s*n*-*e*a*r*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
t*i*e*-*n*t*l*a*i*n*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
r*p*p*n*-*a*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*t*e*-*l*a*i*g*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*t*e*-*e*a*r*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
v*d*o*p*p*-*n*p*c*i*n*s*r*i*e*-*a*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*h*a*e*-*n*t*l*a*i*n*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*h*a*e*-*e*a*r*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
w*t*r*l*n*-*e*a*r*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*s*i*s*a*l*r*m*e*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
g*s*r*p*i*-*a*s*y*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F — Jun 7, 2026
Copyright 2026, tldwp.com. All rights reserved. WordPress OSINT or security needs? Reach out!