Best user enumeration plugins for WordPress
The most popular user enumeration plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Stop User Enumeration leads with 60K+ active installs, ahead of SMNTCS Disable REST API User Endpoints (8K+) and WP Author Security (400+). All 16 plugins tagged “user enumeration” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 user enumeration plugins
- 1.
Stop User EnumerationThe most installed user enumeration plugin, with 60K+ active installs. Rated 4.9 from 132 reviews, updated 2 weeks ago.
- 2.
SMNTCS Disable REST API User Endpoints8K+ active installs. Only 2 reviews so far, updated 1 month ago.
- 3.
WP Author Security400+ active installs. Only 2 reviews so far, last updated 3 years ago. Tested only up to WordPress 6.2.15.
- 4.
No User Enumeration100+ active installs. No reviews yet, last updated 7 years ago. Tested only up to WordPress 5.2.30.
- 5.
ETBS Account Guard70+ active installs. No reviews yet, updated 1 day ago.
- 6.
Disable User Enumeration30+ active installs. No reviews yet, last updated 5 years ago. Tested only up to WordPress 5.5.24.
- 7.
EnumGuard30+ active installs. No reviews yet, updated 1 month ago.
- 8.
Double Knot10+ active installs. No reviews yet, last updated 9 years ago. Tested only up to WordPress 4.8.34.
- 9.
No Login User Enumeration10+ active installs. No reviews yet, last updated 8 years ago. Tested only up to WordPress 5.0.31.
- 10.
FormCourier User Enumeration ProtectionFewer than 10 active installs. No reviews yet, updated 1 month ago.
All 16 plugins tagged “user enumeration”
Stop User Enumeration
Up in the last 7 days:7#667by fullworks17 days ago
Helps secure your site against hacking attacks through detecting User Enumeration
- Installs
- 60K+
- Rating
- 4.9(132)
- Downloads
- 1.2K/day
SMNTCS Disable REST API User Endpoints
Up in the last 7 days:10#2,319by Niels Lange1 month ago
Hides the list of user accounts that the WordPress REST API shows to visitors who are not logged in, which helps prevent user enumeration.
- Installs
- 8K+
- Rating
- 5.0(2)
- Downloads
- 45/day
WP Author Security
Down in the last 7 days:21#9,610by mgm security partners GmbH3 years ago
Protect against user enumeration attacks on author pages and other places where valid user names can be obtained.
- Installs
- 400+
- Rating
- 5.0(2)
- Downloads
- 0/day
No User Enumeration
Up in the last 7 days:14#13,413by Carlos7 years ago
Stop user enumeration for security.
- Installs
- 100+
- Rating
- –
- Downloads
- 0/day
ETBS Account Guard
Up in the last 7 days:287#19,015by ETBS (DAI)1 day ago
Protects the accounts that manage your site. Hides the login names of your users from visitors who are not logged in.
- Installs
- 70+
- Rating
- –
- Downloads
- 11/day
Disable User Enumeration
Down in the last 7 days:69#24,156by incredibledeveloperr5 years ago
Disable User Enumeration is a plugin designed to prevent hackers scanning your site for user names using REST API call.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day
EnumGuard
Up in the last 7 days:697#24,281by Alex Hedström1 month ago
Stops WordPress user enumeration through author URLs, REST, login errors, XML-RPC, sitemaps, and oEmbed.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day
Double Knot
Down in the last 7 days:218#33,087by mattturow9 years ago
Stop brute force login attempts by user name.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
No Login User Enumeration
Down in the last 7 days:1,457#47,689by thomaskonrad9 years ago
This plugin to avoids user enumeration in the Wordpress login form. It does so by simply always returning the same error message, no matter whether on …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
FormCourier User Enumeration Protection
#50,534by Den Slav1 month ago
Blocks common WordPress user enumeration methods and optionally hides public author archives.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Birim REST Lock
Up in the last 7 days:3,489#51,310by Melih Birim5 days ago
Disable the REST API for logged-out visitors without breaking forms. Allowlist routes, stop user enumeration, import from Disable REST API.
- Installs
- <10
- Rating
- –
- Downloads
- 14/day
Prevent user name and email leakage
#55,011by Mark-k8 years ago
Stops user name enumeration and other type of user name and email leakages.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
ARACNE Security
#62,079by CERWALL_SOLUTIONS3 days ago
Exposure scanner with a security score and basic WordPress hardening.
- Installs
- <10
- Rating
- –
- Downloads
- 71/day
Tuning4Web
Up in the last 7 days:4,758#66,719by Piotr Kunicki25 days ago
Checks your site the way an anonymous visitor sees it, verifies that your WordPress hardening actually works, and lists external scripts it loads.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Khushal Login Path Guard
Down in the last 7 days:9,947#73,231by Khushal Tank5 months ago
Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.
- Installs
- <10
- Rating
- 5.0(1)
- Downloads
- 0/day