“enumeration”

Security-Hardening für WordPress: User-Enumeration blocken, Feeds aus, Security-Header, WP-Schmodder und XML-RPC raus.

Minimal WordPress security plugin: blocks REST API user enumeration, hides server metadata, and protects wp-login.php against brute force attacks.

Zero-config WordPress hardening: blocks user enumeration, rate-limits password resets, genericizes login errors. Installable from wp-admin, runs as mu-plugin (MIT)

itineris-prevent-wp-user-enumeration

Hides what identifies a WordPress install and closes its enumeration paths. One settings page of on/off switches.

Blocks common WordPress paths for user enumeration, secures the REST API, disables user sitemaps, and protects against XML-RPC attacks.

WordPress plugin: g470_security (extracted from gatonet_wp_plugins as submodule)