WordPress has a security vulnerability exposing admin user name and private information that could be used for brute force attacks at login.

Using REST API, we can see all the WordPress users/author with some of their information. Which can even be Personal information of employees/author.

We have made a wordpress plugin to patch this vulnerablity based on the solution posted here

https://hackerone.com/reports/1735586

Download the WordPress plugin zip and activate it.

Download Plugin