WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by Carlos v1.3.2

No User Enumeration

Stop user enumeration for security.

No User Enumeration

The facts

Active installs
100+
Price
Free
Last updated
23 Oct 2019
Added
Apr 2016
Requires WP
2.9
Tested up to
WP 5.2.26
Downloads
4,995

Our analysis

AI-assisted

No User Enumeration is a WordPress plugin designed to enhance security by preventing the enumeration of usernames. It addresses vulnerabilities in WordPress installations that allow attackers to discover usernames through various URL patterns and the REST API. The plugin hides the author names in post entries if a nickname is not used and removes the URL link for administrator authors.

This plugin is suitable for WordPress site owners who want to protect their usernames from being easily discovered, particularly those with administrator accounts. It is a simple solution for enhancing the security of user information on WordPress sites.

Best for: WordPress site owners looking to improve their site's security by concealing usernames.

What it does well

  • ✓Hides usernames from author archives
  • ✓Prevents username enumeration via REST API
  • ✓Hides author names in post entries without nicknames
  • ✓Removes URL link for administrator authors

Where it falls short

  • •Limited information on user feedback or performance
  • •Last updated in October 2019, may not be compatible with newer WordPress versions

Verdict

No User Enumeration provides a straightforward approach to protecting usernames on WordPress sites. However, its age and lack of recent updates may be a concern for some users.

From the developer

Carlos's own description of No User Enumeration, lightly tidied.

In many WordPress installations is possible enumerate usernames through the author archives, using urls like this:

http://wpsite/?author=1

http://wpsite/?author=1/

http://wpsite/?bypass=1&author%00=1

http://wpsite/?author%00=%001

http://wpsite/?%61uthor=1

And recently wordpress since 4.7 comes with a rest api integrated that allow list users:

curl -s http://wpsite/wp-json/wp/v2/users/
curl -s http://wpsite/?rest_route=/wp/v2/users
curl http://wpsite/?_method=GET -d rest_route=/wp/v2/users

Know the username of a administrator is the half battle, now an attacker only need guest the password.
This plugin stop it.

Also, is possible get usernames from the post entries.
This plugin, hide the name of the author in a post entry if he is not using a nickname.
Also, hide the url page link of an administrator author.

The main goal is hide the administrators usernames.
Obviously, is better not choose “admin” as the username because is easiliy guessable.

Read the full description on the official page →

Tagged as

industry Bookstore & Publishing
topic Security Https Http Username Authors Hide Rest

Alternatives

Other plugins for bookstores and publishers.

GetGenie

GetGenie

91

AI powered SEO assistant & content writer with 40+ templates, chatbot, NLP keyword research, AEO, GEO, SEO...

Free 80k+ installs 4.8★ (118)
List category posts

List category posts

88

Very customizable plugin to list posts by category (or tag, author and more) in a post, page or widget. Uses t...

Free 80k+ installs 4.7★ (254)
Real Testimonials

Real Testimonials

87

A Customizable Testimonial plugin to Automate Collecting, Filtering, and Publishing Customer Reviews. Testimon...

Free 40k+ installs 4.7★ (226)
One Click Demo Import

One Click Demo Import

86

Import your demo content, widgets and theme settings with one click. Theme authors! Enable simple theme demo i...

Free 1M+ installs 4.3★ (79)