WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| s*l*p.m*r*n*.pl 🔒 | Unknown | marani_theme | F | — | Jun 7, 2026 |
| z*e*g*a*-*e*g.de 🔒 | 6.2.9 | Unknown | F | — | Jun 7, 2026 |
| s*s*t.org 🔒 | 6.8.3 | reviewnews | D | — | Jun 7, 2026 |
| g*m*y*n.t*a*s*a*o*s*b.org 🔒 | 6.3.8 | Newspaper | F | — | Jun 7, 2026 |
| y*r*i*t*i*t*r*t*u*t.org 🔒 | Unknown | libre-2 | D | — | Jun 7, 2026 |
| r*p*n*e*.eu 🔒 | 7.0 | inspiro | F | — | Jun 7, 2026 |
| l*g*o.nl 🔒 | 7.0 | e-expansion | F | — | Jun 7, 2026 |
| a*r*o*e*t.nl 🔒 | 6.9.4 | astra | F | — | Jun 7, 2026 |
| c*m*o*t*n*t*l*.nl 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| k*e*e*h*i*.be 🔒 | Unknown | kadence | D | — | Jun 7, 2026 |
| s*m*e*l*g*r.k*j*-*s*f*l*e*n.de 🔒 | 7.0 | twentytwentyfour | F | — | Jun 7, 2026 |
| t*i*t*l*n*c*r*u*i*a*n*.fr 🔒 | 7.0 | blocksy | F | — | Jun 7, 2026 |
| k*n*e*a*t*v*e*k*t*t*.k*j*-*s*f*l*e*n.de 🔒 | 7.0 | twentytwentyfour | F | — | Jun 7, 2026 |
| o*i*i*a*d*c*m*n*s.net 🔒 | Unknown | lay | F | — | Jun 7, 2026 |
| p*a*d*n*r*s.pro 🔒 | 7.0 | bb-theme | F | — | Jun 7, 2026 |
| d*k.c*.com 🔒 | 6.8.5 | flatsome | F | — | Jun 7, 2026 |
| f*r*h*.z*.com 🔒 | Unknown | flatsome | F | — | Jun 7, 2026 |
| h*t*l*b*i*.c*.com 🔒 | Unknown | flatsome | C | — | Jun 7, 2026 |
| i*t*r*a*a*t*c*a*h*e*e*.io 🔒 | 6.9.4 | flatsome | F | — | Jun 7, 2026 |
| t*n*a*.u*.com 🔒 | Unknown | flatsome | C | — | Jun 7, 2026 |
| q*x*g*.z*.com 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| x*-*d*e*d*n*g*t*z*m*e*-*t*.de 🔒 | 5.8.13 | mh-elegance-lite | F | — | Jun 7, 2026 |
| b*r*v*e*s*l*.cz 🔒 | 7.0 | barevnesklo | F | — | Jun 7, 2026 |
| l*p*l*e*e*s*v*u*s.fr 🔒 | 6.5.3 | blossom-diva | F | — | Jun 7, 2026 |
| g*n*a*h*m*.org 🔒 | 6.9.4 | generatepress_child | B | — | Jun 7, 2026 |
| p*r*o*r*a*e.io 🔒 | Unknown | Parkour | D | — | Jun 7, 2026 |
| l*a*n*o*l*.ing 🔒 | 6.9.4 | generatepress_child | C | — | Jun 7, 2026 |
| w*s*e*s*u*c*e.de 🔒 | 7.0 | twentyfourteen | F | — | Jun 7, 2026 |
| w*w.a*u*a*d*o*u*i*n*.com 🔒 | 7.0 | AquaAid | F | — | Jun 7, 2026 |
| l*a.a*j.m*b*u*h*s*.me 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| o*t*o*r*l*g*e*c*d*x.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| l*n*a*s*.c*m.br 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| t*e*o*e*e*t*o*n*e*.com 🔒 | Unknown | movementyouneed | F | — | Jun 7, 2026 |
| c*a*.be 🔒 | 7.0 | enrollment-pro | F | — | Jun 7, 2026 |
| l*s*t*l*e*s*a*t.fr 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| g*r*k.k*n*t*.cloud 🔒 | 7.0 | salient | F | — | Jun 7, 2026 |
| s*e.u*.com 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| g*5.s*.com 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| x*-*h*8*-*m*c*k*g.j*n.com 🔒 | 6.9.4 | flatsome | F | — | Jun 7, 2026 |
| 3*e*.to 🔒 | 6.9.4 | flatsome | F | — | Jun 7, 2026 |
| p*r*o*o*.org 🔒 | 7.0 | Detube | F | — | Jun 7, 2026 |
| b*g*o*l*f*n*i*g.com 🔒 | 5.7.2 | vivid | D | — | Jun 7, 2026 |
| b*g*o*l*m*g*z*n*.com 🔒 | 2.6.2 | bigworld | F | Jun 7, 2026 | |
| b*g*o*l*p*a*e.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| b*g*o*m*i*h*n*.com 🔒 | 6.9.4 | astra | F | — | Jun 7, 2026 |
| b*g*o*p*t.com 🔒 | 7.0 | mercury | F | — | Jun 7, 2026 |
| b*g*o*t.com 🔒 | 7.0 | delishs | F | — | Jun 7, 2026 |
| b*g*o*d*i*f*r*a*i*n.com 🔒 | 6.1.10 | twentyfifteen | D | — | Jun 7, 2026 |
| b*g*o*d*r*a*.com 🔒 | Unknown | panaderia | D | Jun 7, 2026 | |
| b*g*o*d*b*e*.com 🔒 | 7.0 | bb-theme | F | — | Jun 7, 2026 |