WordPress OSINT, maintenance or security needs? Reach out!
TLDWP
⚠️ Security Risk: User enumeration lets attackers discover valid WordPress usernames through the REST API endpoint (/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
Domain WP Version Theme Headers Other Issues Last Scanned
m*-*e*e*d*c*u*g*n.de 🔒 7.0 hello-elementor F Jun 7, 2026
m*i*y*m*l*e*b*r*.de 🔒 6.8.5 hestia-pro F Jun 7, 2026
l*c*m*.fr 🔒 Unknown Divi F Jun 7, 2026
b*o*.s*l*c*-*y*e.com 🔒 Unknown select F Jun 7, 2026
h*d*i*g*.r*n*l*m*d*n*l*h*s.se 🔒 6.9.4 hello-elementor F Jun 7, 2026
w*m*i*s*h*l*n*.nl 🔒 7.0 vedder F Jun 7, 2026
u*p*r*e*k.pl 🔒 6.4.3 hello-elementor F Jun 7, 2026
b*s*e*.c*s*r*d.cz 🔒 7.0 rookie F Jun 7, 2026
r*n*a*.mx 🔒 7.0 aveit F Jun 7, 2026
p*c*i*o*.fr 🔒 7.0 blocksy F Jun 7, 2026
k*d*a.org 🔒 Unknown startorg F Jun 7, 2026
s*l*e*n*r*s*h*u*s*e*.de 🔒 Unknown betheme F Jun 7, 2026
s*a*l*t*o*a*a.c*n*r*b*n*a.org 🔒 6.7.5 twentyeleven F Jun 7, 2026
b*g*o*t*l*.com 🔒 Unknown big-box-custom-theme F Jun 7, 2026
b*g*o*s*r*r*s*.com 🔒 7.0 woostify F Jun 7, 2026
b*g*o*p*o.com 🔒 7.0 hestia F Jun 7, 2026
b*g*o*c*r*c*o.com 🔒 6.9.4 astra F Jun 7, 2026
b*g*o*c*r.com 🔒 7.0 ona F Jun 7, 2026
b*g*o*l*f*o*c*r*.com 🔒 Unknown wordpress-express-26 F Jun 7, 2026
b*g*o*l*o*.com 🔒 5.2.21 juliet F Jun 7, 2026
b*g*o*r*o*c*u*.com 🔒 7.0 hello-elementor F Jun 7, 2026
b*g*o*s*s*e*s.com 🔒 6.9.4 fontfolio-wpcom F Jun 7, 2026
b*g*o*s*r*e*e*v*c*l*c.com 🔒 Unknown Divi F Jun 7, 2026
b*g*o*s*r*i*e*s.com 🔒 7.0 maxstore F Jun 7, 2026
b*g*o*s*e*t*u*a*t.com 🔒 Unknown Avada F Jun 7, 2026
a*u*r*o*a*o*s*i*n*i*l*g*a.o*g.br 🔒 6.9.4 envo-magazine F Jun 7, 2026
m*s*h*n*c*n*r*l*.com 🔒 6.9.4 MPS F Jun 7, 2026
w*.f*s*e*l*v*.com 🔒 6.9.4 astra F Jun 7, 2026
a*4*e*h.org 🔒 Unknown ai4_tech F Jun 7, 2026
h*m*r.am 🔒 6.9.4 webapricot F Jun 7, 2026
i*n*i*t*r.eu 🔒 7.0 astra F Jun 7, 2026
m*t*l*l*b.c*m.au 🔒 7.0 hello-elementor F Jun 7, 2026
c*e*t*v*.t*e*o*k.com 🔒 7.0 digitalgrove-light F Jun 7, 2026
e*.e*a*u*e*e*s.com 🔒 6.9.4 eNature F Jun 7, 2026
r*t*r*-*u*e*d*i*n*t.de 🔒 Unknown Divi F Jun 7, 2026
f*u*e*-*e*a*r*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
t*i*e*-*e*a*r*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
b*t*t*b*r*f*n*s*i*g*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
b*t*t*b*i*s*a*l*t*o*-*a*t*m*d*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
g*r*a*e*d*s*o*a*-*e*a*r*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
d*a*n*c*e*n*n*-*a*t*m*d*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
d*a*n*r*p*i*-*a*t*m*d*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
p*u*b*n*-*n*p*c*i*n*-*a*t*m*d*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
s*o*e*-*n*t*l*a*i*n*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
b*t*t*b*s*o*e*-*e*a*r*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
s*n*-*n*t*l*a*i*n*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
s*n*-*e*a*r*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
t*i*e*-*n*t*l*a*i*n*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
r*p*p*n*-*a*t*m*d*-*n.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026
g*t*e*-*l*a*i*g*m*h*o*e*i*m*.g*n*s*l*m*i*g*n*h*a*i*g.com 🔒 7.0 voxel F Jun 7, 2026