“enumeration” 14

Security-Hardening für WordPress: User-Enumeration blocken, Feeds aus, Security-Header, WP-Schmodder und XML-RPC raus.

A lightweight WordPress security and privacy hardening plugin that reduces user enumeration, XML-RPC exposure, WordPress fingerprinting, and common information disclosure.

Zero-config WordPress hardening: blocks user enumeration, rate-limits password resets, genericizes login errors. Installable from wp-admin, runs as mu-plugin (MIT)

itineris-prevent-wp-user-enumeration

WordPress plugin. Prevents logged-out users from obtaining a list of user names and email addresses via the REST API.

WordPress must-use plugin: closes the default anonymous surface (XML-RPC, user enumeration, fingerprints, comments, login errors, application passwords). Same file on every site nitida runs.

Single-purpose WordPress must-use plugins

WP-Login Guardian is an advanced WordPress security plugin that protects your website from brute-force attacks, unauthorized login attempts, username enumeration, and malicious IPs. It combines login protection, two-factor authentication (2FA), activity monitoring,…

Stop User Enumeration is a specialized security plugin for WordPress designed to block hackers and automated scanning tools from discovering valid user login names on a website.

Prevent User Enumeration in WordPress simple plugin

A very simple mu plugin for WordPress that disallows access to REST endpoints for users that are not logged in.

Comprehensive security hardening for WordPress - addresses user enumeration, version disclosure, and other vulnerabilities

WordPress Plugin to remove the WordPress user list from the API.