I have been using WordPress for this blog for several years and always thought my setup was reasonably secure. Turns out that there is something called the WordPress REST
API which allows to get quite a lot information about the installation without any security at all. E.g.
https://blog.dummzeuch.de/wp-json/wp/v2/users used to show a list of all
[...]
Weiterlesen...