“enumeration”

Security-Hardening für WordPress: User-Enumeration blocken, Feeds aus, Security-Header, WP-Schmodder und XML-RPC raus.

Minimal WordPress security plugin: blocks REST API user enumeration, hides server metadata, and protects wp-login.php against brute force attacks.

A lightweight WordPress security and privacy hardening plugin that reduces user enumeration, XML-RPC exposure, WordPress fingerprinting, and common information disclosure.

Zero-config WordPress hardening: blocks user enumeration, rate-limits password resets, genericizes login errors. Installable from wp-admin, runs as mu-plugin (MIT)

itineris-prevent-wp-user-enumeration

Prevent User Enumeration in WordPress simple plugin

A very simple mu plugin for WordPress that disallows access to REST endpoints for users that are not logged in.

WordPress plugin. Prevents logged-out users from obtaining a list of user names and email addresses via the REST API.

Stops bots from discovering usernames through ?author= URLs, the REST API, and oEmbed, while keeping admin author links working.

WordPress hardening plugin: hides fingerprints and blocks user enumeration without breaking the site

Hides what identifies a WordPress install and closes its enumeration paths. One settings page of on/off switches.

Blocks common WordPress paths for user enumeration, secures the REST API, disables user sitemaps, and protects against XML-RPC attacks.

WordPress plugin: g470_security (extracted from gatonet_wp_plugins as submodule)

Removes publicly exposed post and comment author information without changing stored users or content ownership.

High-performance, zero-bloat security and anti-malware hardening engine for the Gary Wallage ecosystem. Provides request firewalling, uploads protection, user enumeration shielding, lightweight malware scanning, and security headers without database bloat.

WordPress must-use plugin: closes the default anonymous surface (XML-RPC, user enumeration, fingerprints, comments, login errors, application passwords). Same file on every site nitida runs.

WP-Login Guardian is an advanced WordPress security plugin that protects your website from brute-force attacks, unauthorized login attempts, username enumeration, and malicious IPs. It combines login protection, two-factor authentication (2FA), activity monitoring,…

Hardens the WordPress "Lost Password" page against bots and account enumeration — adds rate limiting, a honeypot field, and generic error responses.

ETBS Account Guard — ログイン名の保護と、権限・ユーザーごとのアクセス制限（IP／BASIC 認証）で、サイトを管理するアカウントを守る WordPress プラグイン

Stop User Enumeration is a specialized security plugin for WordPress designed to block hackers and automated scanning tools from discovering valid user login names on a website.

Hardening de segurança para WordPress. Bloqueia enumeração de usuários, REST API sensível, XML-RPC, RSS de autores e oEmbed.

Comprehensive security hardening for WordPress - addresses user enumeration, version disclosure, and other vulnerabilities

Intercepts user enumeration attempts early and prevents cron option data pollution.

Plugin for WordPress to Protection User Enumeration Protection

A WordPress firewall plugin that automatically detects and bans malicious IPs. Features brute force protection, directory scan detection, plugin enumeration monitoring, and a REST API honeypot.

WordPress Plugin to remove the WordPress user list from the API.

Single-purpose WordPress must-use plugins

Must-use WordPress plugins installed on all Maple Creative sites via Pressable account mu-plugins. Public on purpose: Pressable fetches files by URL.