WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| p*e*r*.u*i*e*s*t*o*g*l*a*.ie 🔒 | 6.3 | digitaledge-pietra | F | — | Jun 7, 2026 |
| d*i*r*e.photography 🔒 | 6.0.11 | border | F | — | Jun 7, 2026 |
| n*r*a*a*a*e*.com 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| n*r*o*a*h*z*o.com 🔒 | 4.9.26 | twentyseventeen | F | — | Jun 7, 2026 |
| n*r*l*e*.com 🔒 | 7.0 | bridge | F | — | Jun 7, 2026 |
| n*r*d*s*g*.com 🔒 | 7.0 | phlox | F | — | Jun 7, 2026 |
| n*r*p*m*r*n*t*.com 🔒 | 7.0 | brixel | F | — | Jun 7, 2026 |
| n*r*a*a*n*o*.com 🔒 | 7.0 | generatepress | F | — | Jun 7, 2026 |
| n*r*a*a*r*a*s.com 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| m*t*i*.ru 🔒 | 6.3.4 | storefront | F | — | Jun 7, 2026 |
| s*o*.p*o*a*o*o*f.ru 🔒 | Unknown | salonof | F | — | Jun 7, 2026 |
| c*i*a.i*a.o*g.br 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| d*v*s*p*s*.fr 🔒 | Unknown | ultra | F | — | Jun 7, 2026 |
| l*n*-*f*s*g*t.net 🔒 | 7.0 | twentytwentyfour | F | — | Jun 7, 2026 |
| w*r*e*i*i*.ch 🔒 | Unknown | Unknown | D | — | Jun 7, 2026 |
| p*a*i*c*e*k*.ch 🔒 | 6.9.4 | plane-wpcom | F | — | Jun 7, 2026 |
| b*n*a*n*i*e.c*l*i*i*a*.es 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| v*d*o.k*y*s*u*i*.com 🔒 | 7.0 | digimag-lite | F | — | Jun 7, 2026 |
| k*k*o*o*.se 🔒 | Unknown | Unknown | D | — | Jun 7, 2026 |
| t*e*o*s*a*c*e*t*r.c*.uk 🔒 | 6.9.4 | nhsuk-frontend-theme | D | — | Jun 7, 2026 |
| b*e*e*-*n*-*c*a*e.de 🔒 | 6.9.4 | twentyfourteen | F | Jun 7, 2026 | |
| p*8*8*.n*t.pk 🔒 | 7.0 | kadence | F | — | Jun 7, 2026 |
| r*d*i*a*a*e*s*r*c*.pl 🔒 | 7.0 | twentyseventeen | F | — | Jun 7, 2026 |
| s*a*e*n*o.pl 🔒 | Unknown | Newspaper | F | — | Jun 7, 2026 |
| f*c*r*e.ch 🔒 | 6.9.4 | colormag | F | — | Jun 7, 2026 |
| a*g*o*r*.q*.ca 🔒 | 7.0 | APV2 | F | — | Jun 7, 2026 |
| m*l*o*e*i*n.ru 🔒 | 6.9.4 | blankslate | F | — | Jun 7, 2026 |
| 7*h*t*e*t*i*s.org 🔒 | Unknown | Divi | B | — | Jun 7, 2026 |
| b*e*f*c*o*y*l*e*.cz 🔒 | 6.8.5 | beerbactory | F | — | Jun 7, 2026 |
| s*i*c*u*i*a*s.su 🔒 | 7.0 | woodmart | F | — | Jun 7, 2026 |
| h*f*n*i*s.de | 4.7.33 | arcade-basic | F | — | Jun 7, 2026 |
| r*c*-*r*w*e*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| c*a*g*t.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| t*k*o*-*8.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| l*k*d*r*c*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| m*c*-*a*t*r.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| g*d*o*-*a*-*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| p*s*a*s*w*g*r.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| t*o*-*t*r*a*-*v*r*l*o*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| t*u*k*s*m*l*t*r*b*g*r*g*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| l*k*t*u*o.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| p*c*n*.x*z*p*.com | Unknown | appyn | F | — | Jun 7, 2026 |
| s*b*a*t*c*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| d*t*-*o*-*a*a*o*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| m*n*c*a*t*1*2*-*.e*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| f*f*-*a*i*i*c*l*e*t*o*.e*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| p*p*y*p*a*t*m*-*h*p*e*-*.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| p*o*v*n*a.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |
| s*e*l*h*l*b*l*d*g*.org 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| m*t*o*i*t.x*z*p*.com 🔒 | Unknown | appyn | F | — | Jun 7, 2026 |