WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| m*g*c*l*u*a*o*h*b.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| f*s*a*.pl 🔒 | 6.4.8 | astra | F | — | Jun 7, 2026 |
| p*n*e*s*c*-*p.s*c*r*-*e*.jp 🔒 | Unknown | pan_news | F | — | Jun 7, 2026 |
| f*e*k*.ru 🔒 | 6.9.4 | profex | F | — | Jun 7, 2026 |
| o*n*c*n*.com 🔒 | 6.2.9 | carzine | F | — | Jun 7, 2026 |
| m*l*x*m*o*r*.lu 🔒 | 7.0 | patiotime | F | — | Jun 7, 2026 |
| n*v*.c*.com 🔒 | 7.0 | novo | F | — | Jun 7, 2026 |
| s*x*l*g*e*h*i*a*t.be 🔒 | Unknown | sexologue | F | — | Jun 7, 2026 |
| l*d*d*g*i*r*i*t*.com 🔒 | Unknown | Unknown | B | — | Jun 7, 2026 |
| a*c*t.s*c*r*l*.e*u.au 🔒 | 7.0 | unos-premium | F | — | Jun 7, 2026 |
| c*l*i*g*h*t*o*e.de 🔒 | 6.9.4 | oblique | F | — | Jun 7, 2026 |
| m*r*i*a*s*e*t*.de 🔒 | 5.9.13 | hudsonwp | F | — | Jun 7, 2026 |
| s*e*m*o*t*k*c*u*c*.com 🔒 | 6.9.4 | kadence | D | — | Jun 7, 2026 |
| d*n*e*k*i*z*c*.de 🔒 | 5.2.24 | dt-the7 | F | Jun 7, 2026 | |
| s*a*c*m*d*a.de 🔒 | 6.3.8 | onepress | F | — | Jun 7, 2026 |
| b*s*-*u*t*m*d*a.com | 7.0 | inspiro | F | — | Jun 7, 2026 |
| m*e*e*t*.fr 🔒 | 6.9.4 | grandconference | F | — | Jun 7, 2026 |
| t*u*i*o*u.t*m*.tv 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| b*k*i*e*r*f*r*a*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| b*k*k*p*.com 🔒 | Unknown | affinger | F | — | Jun 7, 2026 |
| b*k*k*s*i*a.com 🔒 | 6.4.8 | diver | F | — | Jun 7, 2026 |
| b*k*m*f*e*.com 🔒 | 6.5.8 | Bikam-W-Feen | F | — | Jun 7, 2026 |
| b*k*m*o*g*l*i*.com 🔒 | 7.0 | porto | F | — | Jun 7, 2026 |
| b*k*n*l*g.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| b*k*n*r*4*7*e*s.com 🔒 | 6.6.2 | chromenews | F | — | Jun 7, 2026 |
| b*k*n*c*.com 🔒 | Unknown | varia | F | — | Jun 7, 2026 |
| b*k*p*.com 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| b*k*r*y*r.com 🔒 | Unknown | careerfy | F | — | Jun 7, 2026 |
| b*k*-*d.com 🔒 | 7.0 | darna | C | — | Jun 7, 2026 |
| b*k*2.com | 4.7.29 | twentyseventeen | F | — | Jun 7, 2026 |
| b*k*b*a.com 🔒 | 7.0 | twentytwentytwo | F | — | Jun 7, 2026 |
| b*k*c*.com 🔒 | 6.8 | astra | F | — | Jun 7, 2026 |
| b*k*i*a*a*e*y.com 🔒 | 6.8.2 | hello-elementor | F | — | Jun 7, 2026 |
| y*p*f*t*s.com 🔒 | 7.0 | jbg5th-bln | F | — | Jun 7, 2026 |
| j*d*e.mn 🔒 | 6.9.4 | hello-elementor | F | — | Jun 7, 2026 |
| z*t*0*.p*o*c*i*g*r.de 🔒 | 6.9.4 | ips | F | — | Jun 7, 2026 |
| b*o*.g*l*d*v.net 🔒 | 6.9.4 | soulvision | F | — | Jun 7, 2026 |
| b*i*i*h*o*r*s*.c*.uk 🔒 | 7.0 | newsmax | F | — | Jun 7, 2026 |
| p*o*e*m*.com 🔒 | 6.9.4 | pingraphy | F | — | Jun 7, 2026 |
| m*h*e*-*u.ru 🔒 | 6.7.1 | kadence | F | — | Jun 7, 2026 |
| j*u*n*l*l*n*t*e*o*e*i*a.ru 🔒 | Unknown | romb | F | — | Jun 7, 2026 |
| m*m*l*d*.ru 🔒 | Unknown | sky | F | — | Jun 7, 2026 |
| s*b*n*6*.fm 🔒 | 7.0 | flatsome | F | — | Jun 7, 2026 |
| d*c*o*.s*n*o*k*i.o*.jp 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| s*u*-*i*e*r*.cz 🔒 | 7.0 | kadence | F | — | Jun 7, 2026 |
| b*o*.b*r*e*.com 🔒 | Unknown | masthead | F | — | Jun 7, 2026 |
| j*s.k*n*i*h*w*1*2*.com 🔒 | 7.0 | oops_tcd048 | F | — | Jun 7, 2026 |
| p*u*1*.club | Unknown | gorgeous_tcd013 | F | — | Jun 7, 2026 |
| c*m*e.fit 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| r*b*a*l*b.com | 5.2.21 | rebnaclub | F | — | Jun 7, 2026 |