FALKEN'S MAZE / CHECKS / USER ENUMERATION
User enumeration
What Joshua checks
Checks whether usernames are exposed through the REST API or author archives.
Why it matters
Exposed usernames give attackers half of every login.
How to fix it
Restrict the users endpoint to logged-in users.
In the Maze Score
- Worth
- 5 points (half for a warning)
- Severity
- Medium
- Runs on
- Plans with the Plugin Recon add-on, on domains with verified ownership
Related checks
- WordPress core versionPlugin Recon
- Plugin versionsPlugin Recon
- Theme versionsPlugin Recon
- XML-RPCPlugin Recon
- Known vulnerabilitiesPlugin Recon
- Exposed filesPlugin Recon
- PHP and WordPress settingsPlugin Recon
- Abandoned pluginsPlugin Recon
- Login protectionPlugin Recon
How does your domain do? Scan it free and get a Maze Score in about a minute.