Prevent for User Enumeration on WordPress

I’m happy to announce option Prevent collecting of authors logins which you can find under settings,

WordPress console -> Settings -> Security by CleanTalk -> General Settings

This option disables users IDs enumeration in your WordPress. So, it stands against brute force for authors names. Here is example how the enumeration works in the plain WordPress,

https://blog.cleantalk.org/?author=1

By executing such links, an attacker brute forces users list on a site to get valid IDs and use it in further attacks.

If you turn option Prevent collecting of authors logins on, the plugin disable enumeration by showing a blank page instead of valid page of author. URL for the blank page like this,

https://blog.cleantalk.org/author/honeypot_login_1753432662.9124

That’s it! Drop questions in the comment form down below.