WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| t*e*a*i*g*i*e.com 🔒 | 7.0.2 | blockwp | F | — | Jul 28, 2026 |
| t*e*a*i*g*o*l*.com 🔒 | Unknown | cpm-diana | D | — | Jul 28, 2026 |
| t*e*a*i*g*e*o*e*.com 🔒 | Unknown | Divi | B | — | Jul 28, 2026 |
| t*e*a*i*g*h*o*i*l*.com 🔒 | Unknown | katen | F | — | Jul 28, 2026 |
| t*e*a*i*g*a*a*o*.com 🔒 | 5.5.18 | theissue | F | — | Jul 28, 2026 |
| t*e*a*i*g*d*i*e*i*l.com 🔒 | Unknown | Marilyn | F | — | Jul 28, 2026 |
| m*n*y*l*p*l*g.com 🔒 | Unknown | canard | F | — | Jul 28, 2026 |
| m*n*y*l*p*l*f*.com 🔒 | Unknown | jstork | F | — | Jul 28, 2026 |
| m*n*y*h*c*.com 🔒 | 7.0.2 | smart-mag | F | — | Jul 28, 2026 |
| g*o*v*f*i*e*.com 🔒 | 6.9.1 | astra | F | — | Jul 28, 2026 |
| d*g*r*i*.eu | 4.9.7 | storefront | D | — | Jul 28, 2026 |
| d*g*r*i*.de 🔒 | 4.9.7 | storefront | D | — | Jul 28, 2026 |
| m*c*a*n*d*r*.de 🔒 | 6.9.5 | virtue | F | — | Jul 28, 2026 |
| s*h*o*p*t*o*i*.de 🔒 | 6.9.5 | virtue | F | — | Jul 28, 2026 |
| n*w*o*d*y*t*m*.de 🔒 | Unknown | Divi | F | — | Jul 28, 2026 |
| z*f.hu 🔒 | 7.0 | hello-elementor | F | — | Jul 28, 2026 |
| f*u*n*i*s*l*n*e.com 🔒 | 7.0.2 | twentytwentytwo | F | — | Jul 28, 2026 |
| c*s*o*w*a*.de 🔒 | 6.3.4 | betheme | F | — | Jul 28, 2026 |
| n*s*n*o*m*t*c*.it 🔒 | 6.8.3 | Avada | F | — | Jul 28, 2026 |
| m*t*s*e.pt 🔒 | 7.0.2 | promos | D | — | Jul 28, 2026 |
| w*r*h.media 🔒 | Unknown | Divi | F | — | Jul 28, 2026 |
| c*w*r*s*a*t.de 🔒 | 6.8.6 | enfold | F | — | Jul 28, 2026 |
| c*w*r*-*o.de 🔒 | 7.0.2 | hello-elementor | F | — | Jul 28, 2026 |
| c*w*r*i*g*m*u*i*n*e.fr 🔒 | 7.0.2 | hello-elementor | F | — | Jul 28, 2026 |
| b*u*h*a*-*r*e*e*.de 🔒 | 7.0.2 | uncode | F | — | Jul 28, 2026 |
| c*e*p*l*s.de 🔒 | 7.0.2 | themify-ultra | F | — | Jul 28, 2026 |
| r*d*t*g.fr 🔒 | 6.8.6 | jupiter | F | — | Jul 28, 2026 |
| c*w*r*-*a*.co 🔒 | 7.0 | bridge | D | — | Jul 28, 2026 |
| i*c*s*v*.vc 🔒 | Unknown | lodestar | F | — | Jul 28, 2026 |
| s*n*y*a*t*i*.ca 🔒 | 7.0.2 | twentyfourteen | F | — | Jul 28, 2026 |
| e*o*.fr 🔒 | Unknown | hello-elementor | F | — | Jul 28, 2026 |
| c*v*i*i*i.fr 🔒 | 6.5.8 | hello-elementor | F | — | Jul 28, 2026 |
| d*a*n*s*i*r*d*o*o*y*e*v*c*s.org 🔒 | Unknown | twentyseventeen | F | — | Jul 28, 2026 |
| v*b*o.ventures 🔒 | 7.0.2 | digiboost-theme | C | — | Jul 28, 2026 |
| b*n*a*q.jp 🔒 | 7.0.2 | twentytwentyone | F | — | Jul 28, 2026 |
| m*k*m*b*r*i*.org 🔒 | 7.0.2 | lay | C | — | Jul 28, 2026 |
| j*g*n*s*e*s*r*e.ch 🔒 | Unknown | jugendseelsorge | F | — | Jul 28, 2026 |
| i*j*r*c*t*r.de 🔒 | 7.0.2 | siteorigin-north | F | — | Jul 28, 2026 |
| d*s*i*a*i*n*a*o.fi 🔒 | 7.0.2 | hello-elementor | F | — | Jul 28, 2026 |
| a*k*v*a.ru 🔒 | 7.0.2 | astra | F | — | Jul 28, 2026 |
| r*r*a.org 🔒 | Unknown | astra | F | — | Jul 28, 2026 |
| c*m*u*e*x.fr 🔒 | Unknown | Unknown | F | — | Jul 28, 2026 |
| e*o*i*e.fr 🔒 | 7.0.2 | citylogic | F | — | Jul 28, 2026 |
| f*o*t*t*b*.eu 🔒 | Unknown | astra | F | — | Jul 28, 2026 |
| i*l*n*.fr 🔒 | 7.0.2 | kava | F | — | Jul 28, 2026 |
| t*u*i*m*-*a*t*a*d*s*v*e.fr 🔒 | Unknown | Unknown | F | — | Jul 28, 2026 |
| j*n*s*n*i*v*a*t.nl 🔒 | Unknown | Janssenuitvaart | F | — | Jul 28, 2026 |
| d*a*a*t*i*v*a*t*e*z*r*i*g.nl 🔒 | 7.0.2 | Avada | F | — | Jul 28, 2026 |
| d*s*i*l*a*e*a*r*i*.nl 🔒 | Unknown | astra | D | — | Jul 28, 2026 |
| d*s*e*g*.de 🔒 | 5.5.18 | sydney | F | — | Jul 28, 2026 |