WordPress sites that publicly leak usernames via the REST API or author archives, making brute-force attacks easier.
/wp-json/wp/v2/users) or the author archive redirect (/?author=1). Knowing a valid username is the first half of a brute-force attack. It can be mitigated with a security plugin or by blocking these endpoints.
| Domain | WP Version | Theme | Headers | Other Issues | Last Scanned |
|---|---|---|---|---|---|
| h*l*o*r*j*k*.org 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| d*-*a*e*b*r*.de 🔒 | Unknown | silberweiss | F | — | Jun 7, 2026 |
| f*e*n*e*i*a*s*-*e*n*.de 🔒 | 7.0 | extendable | F | — | Jun 7, 2026 |
| r*m*d*m*-*e*n*p*l*s.de | 7.0 | church | F | — | Jun 7, 2026 |
| s*t*.u*.com 🔒 | 7.0 | neve | F | — | Jun 7, 2026 |
| b*o*.g*r*a*i*i*i*n.com 🔒 | 6.4.8 | twentysixteen | F | — | Jun 7, 2026 |
| n*g*f*o*s.c*.jp 🔒 | 6.0.1 | lightning-pro | F | — | Jun 7, 2026 |
| t*m*y*m*.com 🔒 | Unknown | tamayomo | F | — | Jun 7, 2026 |
| a*t*c*e*.g*m*r*y.com 🔒 | 7.0 | cali | F | — | Jun 7, 2026 |
| t*l*o*a*h*w*y.pl 🔒 | 7.0 | generatepress | C | — | Jun 7, 2026 |
| w*o*l*w.t*x*o.pl 🔒 | Unknown | taxeo | F | — | Jun 7, 2026 |
| p*m*u*d.pl 🔒 | 5.8.13 | plmfund | F | — | Jun 7, 2026 |
| a*a*d*f*o*.com 🔒 | 6.9.4 | Avada | D | — | Jun 7, 2026 |
| f*s*i*a*l*c*.eu 🔒 | 6.7.5 | hello-elementor | F | — | Jun 7, 2026 |
| e*e*t*s.pl 🔒 | 7.0 | customizr-pro | F | Jun 7, 2026 | |
| a*t*o*z*i*.pl 🔒 | 7.0 | articlewave | F | — | Jun 7, 2026 |
| c*n*e*i*o*p*r*a*.s*d.cu 🔒 | 6.9 | devdmbootstrap4 | D | — | Jun 7, 2026 |
| c*r*i*o*i*.de 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| l*f*t*i*l*t.eu 🔒 | Unknown | Divi | F | — | Jun 7, 2026 |
| a*u*i.c*m.ec 🔒 | 6.6.5 | maskittoamuki | F | — | Jun 7, 2026 |
| n*1.l*s*e*s*n.com 🔒 | 6.9.4 | twentytwelve | F | Jun 7, 2026 | |
| n*1.m*d*s*r*a.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| n*1.m*r*e*i*g*k*.com 🔒 | 6.8.5 | industrialArchitecture | F | — | Jun 7, 2026 |
| n*1.k*n*z*r*u*.com 🔒 | 7.0 | customizr | F | — | Jun 7, 2026 |
| n*1.k*r*p*u*.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| n*1.k*m*a*a*u*t*m*d*o*.com 🔒 | Unknown | Unknown | F | — | Jun 7, 2026 |
| n*1.l*s*e*a*-*t*y.com 🔒 | 7.0 | magazine-7 | F | — | Jun 7, 2026 |
| a*e*a*d*r*d*o*k*n.ru | 5.9.13 | layers-elementor | F | — | Jun 7, 2026 |
| d*p*n*o*m*.org 🔒 | 6.5.8 | hello-elementor | F | — | Jun 7, 2026 |
| p*a*o*r*c*w*i*a.pl 🔒 | 7.0 | generatepress | C | — | Jun 7, 2026 |
| t*l*o*a*o*h*d*.pl 🔒 | 7.0 | generatepress | C | — | Jun 7, 2026 |
| o*o*i*e*y.pl 🔒 | 7.0 | generatepress | D | — | Jun 7, 2026 |
| l*p*k*.pl 🔒 | 6.3.2 | generatepress | D | — | Jun 7, 2026 |
| p*o*u*.pl 🔒 | 6.4.2 | generatepress | C | — | Jun 7, 2026 |
| o*t*o*-*e*p*i*.de 🔒 | Unknown | hello-elementor | F | — | Jun 7, 2026 |
| i*s*i*u*-*i*r*e.com 🔒 | 5.2.24 | treeson | F | — | Jun 7, 2026 |
| l*m*i*o*d*m*r*h*.fr 🔒 | 7.0 | hello-elementor | F | — | Jun 7, 2026 |
| g*e*n*o*t*r.pl 🔒 | 6.7.5 | starter-empressia | F | — | Jun 7, 2026 |
| i*a*e*m*n*a*a.us 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| g*a*s*i*l*u*a*d*.org 🔒 | Unknown | varia | F | — | Jun 7, 2026 |
| m*r*a*s*l*m*n*-*t*f*u*g.de 🔒 | 7.0 | bic_new_bootstrap_4 | F | — | Jun 7, 2026 |
| s*d*.de 🔒 | 7.0 | enfold | F | — | Jun 7, 2026 |
| f*-*o*o*i*s.de 🔒 | 7.0 | fw-robotics | F | — | Jun 7, 2026 |
| d*i*k*y*t.com 🔒 | Unknown | lytt | F | — | Jun 7, 2026 |
| d*c*v*r*a*d*u*t*r*a*m*t*d*.de 🔒 | 7.0 | oceanwp | F | — | Jun 7, 2026 |
| w*n*9.f*8*8.tw 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| l*v*b*l*z*.c*m.br 🔒 | 7.0 | astra | F | — | Jun 7, 2026 |
| x*i*t*.f*l*t*m*b.com 🔒 | 6.9.4 | downzit-child | D | — | Jun 7, 2026 |
| h*-*i.f*l*t*m*b.com 🔒 | 6.9.4 | downzit-child | D | — | Jun 7, 2026 |
| p*l*b*z*.f*l*t*m*b.com 🔒 | 6.9.4 | downzit-child | D | — | Jun 7, 2026 |