fullworks

Alan Fuller

Stop User Enumeration

Helps secure your site against hacking attacks through detecting  User Enumeration

mgm security partners GmbH

WP Author Security

Protect against user enumeration attacks on author pages and other places where valid user names can be obtained.

Paul Gilzow

Super Simple Account Enumeration Blocker

WebProtect.ai

Ananda Krishna

Shikhil

WP Hardening (discontinued)

The WP Hardening is a one-click tool to fix standard security recommendations on your WordPress website.

incredibledeveloperr

Disable User Enumeration

Disable User Enumeration is a plugin designed to prevent hackers scanning your site for user names using REST API call.

mattturow

Double Knot

Stop brute force login attempts by user name.

thomaskonrad

No Login User Enumeration

This plugin to avoids user enumeration in the Wordpress login form. It does so by simply always returning the same error message, no matter whether on …

Khushal Tank

Khushal Login Path Guard

Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.

Mark-k

Prevent user name and email leakage

Stops user name enumeration and other type of user name and email leakages.

Carlos

In many WordPress installations is possible enumerate usernames through the author archives, using urls like this:
http://wpsite/?author=1
http://wpsite/?author=1/
http://wpsite/?bypass=1&author%00=1
http://wpsite/?author%00=%001
http://wpsite/?%61uthor=1
And recently wordpress since 4.7 comes with a rest api integrated that allow list users:
curl -s http://wpsite/wp-json/wp/v2/users/ 
curl -s http://wpsite/?rest_route=/wp/v2/users 
curl http://wpsite/?_method=GET -d rest_route=/wp/v2/users
Know the username of a administrator is the half battle, now an attacker only need guest the password. 
This plugin stop it.
Also, is possible get usernames from the post entries. 
This plugin, hide the name of the author in a post entry if he is not using a nickname. 
Also, hide the url page link of an administrator author.
The main goal is hide the administrators usernames. 
Obviously, is better not choose “admin” as the username because is easiliy guessable.

Alternatives to No User Enumeration

Top alternatives