WordPress Username enumeration by REST API: SITE/wp-json/wp/v2/users : FIX: NGINX: https://github.com/anantshri/wp-security/blob/master/ngnix-config/wp-json-blocking.nginx HTACCESS: https://github.com/anantshri/wp-security/blob/master/htaccess/block-wp-json-api.htaccess