Do you hosting a wp site?

[Masetrix]

Test this...

https://www.yourdomain.tld/wp-json/wp/v2/users/

If you get an error, ok. No Dataleak there.

if you see Usernames and so on..
put this in your .htaccess near: RewriteBase /

RewriteCond %{QUERY_STRING} author=\d
RewriteRule ^ /? [F,L]
RewriteCond %{REQUEST_URI} (wp-json|author)
RewriteRule ^(.*)$ https://www.yourdomain.tld [F,L]

Hth.

 

[Slavik]

I banned all my hosting clients from wordpress years ago. Was forever running around plugging security issues from themes, pluggins, the core itself, spam, etc etc.

I would actually rather lose the client than have to deal with looking after a wordpress site again.

 

[Mr Lucky]

I would actually rather lose the client than have to deal with looking after a wordpress site again.

What would you recommend as a secure alternative?