How Hackers Find Your WordPress Username (and How to Stop Them) April 11, 2026 by ovanapdesign Typing ?author=1 on any WordPress site reveals the admin username. Attackers use this for brute force login. Here’s how to block author enumeration.