“user-enumeration” 4

WordPress security — brute force protection, user enumeration blocking, and form spam filtering with honeypot and keyword detection.

itineris-prevent-wp-user-enumeration

WordPress plugin. Prevents logged-out users from obtaining a list of user names and email addresses via the REST API.

Simple plugin that disallows access to REST endpoints for users that are not logged in. Stops the REST API from being used to enumerate users.