darteweb

Whook Security is the plugin used to scan your WordPress website plugins. If there is any plugin installed which is vulnerable and reported by any developer to scan it will reflect to your website too.
This plugin is very useful to scan and save your website get hacked. Plugin is using WPScan API v3 to access their database to provide detailed Information to your website.
It is very easy to install and use.
Our plugin is not affiliated or linked with WPScan or WPvulnub website. We are using these third-party APIs to access their database and show results accordingly.
<h3>What Does it do?</h3>
<ol>
<li>Scan the plugins installed on your WordPress Website.</li>
<li>Shows the status of plugin, if it?s vulnerable or it will harm your website or not.</li>
<li>Also Provide Information if there is any update for the plugin is there or not.</li>
</ol>

Whook Security

Our plugin Scans other plugins vulnerabilities listed in the WPScan Database of vulnerabilities.

Carlos

In many WordPress installations is possible enumerate usernames through the author archives, using urls like this:
http://wpsite/?author=1
http://wpsite/?author=1/
http://wpsite/?bypass=1&author%00=1
http://wpsite/?author%00=%001
http://wpsite/?%61uthor=1
And recently wordpress since 4.7 comes with a rest api integrated that allow list users:
curl -s http://wpsite/wp-json/wp/v2/users/ 
curl -s http://wpsite/?rest_route=/wp/v2/users 
curl http://wpsite/?_method=GET -d rest_route=/wp/v2/users
Know the username of a administrator is the half battle, now an attacker only need guest the password. 
This plugin stop it.
Also, is possible get usernames from the post entries. 
This plugin, hide the name of the author in a post entry if he is not using a nickname. 
Also, hide the url page link of an administrator author.
The main goal is hide the administrators usernames. 
Obviously, is better not choose “admin” as the username because is easiliy guessable.

Whook Security vs No User Enumeration