Title: Disable User Enumeration
Author: incredibledeveloperr
Published: <strong>Desanm 16, 2020</strong>
Last modified: Desanm 16, 2020

---

Search plugins

![](https://ps.w.org/disabling-user-enumeration/assets/banner-772x250.png?rev=2440405)

This plugin **hasn’t been tested with the latest 3 major releases of WordPress**.
It may no longer be maintained or supported and may have compatibility issues when
used with more recent versions of WordPress.

![](https://ps.w.org/disabling-user-enumeration/assets/icon-128x128.png?rev=2440405)

# Disable User Enumeration

 By [incredibledeveloperr](https://profiles.wordpress.org/incredibledeveloperr/)

[Download](https://downloads.wordpress.org/plugin/disabling-user-enumeration.zip)

 * [Details](https://hat.wordpress.org/plugins/disabling-user-enumeration/#description)
 * [Reviews](https://hat.wordpress.org/plugins/disabling-user-enumeration/#reviews)
 *  [Installation](https://hat.wordpress.org/plugins/disabling-user-enumeration/#installation)
 * [Development](https://hat.wordpress.org/plugins/disabling-user-enumeration/#developers)

 [Support](https://wordpress.org/support/plugin/disabling-user-enumeration/)

## Description

User enumeration can be use for brute-force techniques to either guess or confirm
valid users in a system. User enumeration is often a web application vulnerability,
though it can also be found in any system that requires user authentication.

An enumeration attack allows a hacker to check whether a name exists in the database.
For example, to set up a brute-force attack, rather than searching through login
and password pairs, all they need is a matching password for a verified user name,
saving time and effort.

The phrase “username harvesting” refers to a vulnerability that when exploited allows
people or programs interacting with an application to determine what a valid username
is vs an invalid username.

**You can check your site have user enumeration by simply type https://selectedfirms.
co/wp-json/wp/v2/users that’s it. **

Features:

 1. We only disable for non logged in users.
 2. You can deactivate with single click. No extra configuration required.
 3. Something else about the plugin

## Screenshots

 * [[
 * Activate plugin.
 * [[
 * Restriction applied on username.

## Installation

Either using the dashboard ‘Add Plugin’ feature to find, install and activate the
plugin

 1. Download and the plugin from the download link
 2. Upload the entire plugin directory to your website’s /wp-contents/plugins/ using
    a file manager or FTP
 3. Activate the plugin through the Plugins menu

## FAQ

### How to check plugin works?

You just need to run in browser to verify <youdomin.com>/wp-json/wp/v2/users.

### I have active plugin, why its still display user data in response.

Just double check to make sure, you are not logged in. This plugin won’t do anything
for logged in users, it only works when you are logged out.

### What about settings?

There are no settings required. We are focus on only user enumerations. Only activation
is enough.

### Is it change anything in database?

Plugin is work standalone. Its not required any database operations.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Disable User Enumeration” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ incredibledeveloperr ](https://profiles.wordpress.org/incredibledeveloperr/)

[Translate “Disable User Enumeration” into your language.](https://translate.wordpress.org/projects/wp-plugins/disabling-user-enumeration)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/disabling-user-enumeration/),
check out the [SVN repository](https://plugins.svn.wordpress.org/disabling-user-enumeration/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/disabling-user-enumeration/)
by [RSS](https://plugins.trac.wordpress.org/log/disabling-user-enumeration/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 0.1

 * Initial release.

## Meta

 *  Version **1.0.0**
 *  Last updated **5 years ago**
 *  Active installations **30+**
 *  WordPress version ** 4.7 or higher **
 *  Tested up to **5.5.18**
 *  PHP version ** 7.2 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/disabling-user-enumeration/)
 * Tag
 * [user enumeration](https://hat.wordpress.org/plugins/tags/user-enumeration/)
 *  [Advanced View](https://hat.wordpress.org/plugins/disabling-user-enumeration/advanced/)

## Ratings

No reviews have been submitted yet.

[Add my review](https://wordpress.org/support/plugin/disabling-user-enumeration/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/disabling-user-enumeration/reviews/)

## Contributors

 *   [ incredibledeveloperr ](https://profiles.wordpress.org/incredibledeveloperr/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/disabling-user-enumeration/)