You can use the REST API to list users:
/wp-json/wp/v2/users
Add that to the end of your website URL.
Plugins such as Wordfence can prevent anonymous users from accessing this.
You can also disable the REST API if you do not use it.
Related Posts:
- Basic auth WordPress REST API dilemma
- security+best practices: root or www-data on a wordpress content folder?
- Any reason to be concerned by a wave of “zombie” blog signups?
- How to change WordPress user ID?
- Setting WP Admin passwords to expire
- What do spammers gain by signing up as a user?
- How can I secure a WordPress blog using OpenID from a single provider?
- Rule to redirect non logged in User to Custom Registration/login Page in .htaccess file
- Restrict access of admin uploads to certain logged-in users?
- Force user to change their password on the frontend at the first login and password policy
- Should I encrypt the response that triggers an Ajax action? Is nonce sufficient?
- Are there mutiple ways to get usernames (as a hacker)
- Reset Password policy
- How do I protect user_activation_key?
- Failed login attempts
- Separate Out Real Users
- WordPress Password security related questions
- Preventing user enumeration: which logic is better?
- Force users to use password with specifications
- throttle/limit a logged in user’s http requests to specific page on a per day basis
- Require confirmation of current user’s email before updating database and before send_email_change_email
- Securely log in a user without a password using a link?
- What techniques can a user employ to achieve a password rated “strong” in the WordPress password checker
- WordPress – Security Question at Login from User’s Meta Data
- (How) does WordPress protect direct access of user data?
- How to redirect all HTTP requests to HTTPS
- If the current user is an administrator or editor
- Getting a List of Currently Available Roles on a WordPress Site?
- Editor can create any new user except administrator
- How do I add a field on the Users profile? For example, country, age etc
- How do I display logged-in username IF logged-in?
- How to allow an user role to create a new user under a role which lower than his level only?
- user_login vs. user_nicename
- How to programatically change username (user_login)?
- Change the Author Slug from Username to Nickname
- Remove Ability for Other Users to View Administrator in User List?
- Difference between update_user_meta and update_user_option
- Make display name unique
- Make WooCommerce pages accessible for logged in users only
- Find out if logged in user is not subscriber
- WordPress usermeta scaling for thousands of users
- How to get WordPress Username in Array format
- Display user registration date
- Get multiple roles with get_users
- get_user_meta() doesn’t include user email?
- Confirmation required on email change
- How to Merge Two Authors Into One?
- Whats the best way to share user data across multiple WordPress websites?
- get_current_user_id() returns 0?
- How to get userid at wp_logout action hook?
- Groups of capabilities: users with multiple roles?
- Is there a way to merge two users?
- Improve wordpress security by hiding non public resources
- User-edit role setting distinct from wp_capabilities? [closed]
- List users by last name in WP_User_Query
- Security and .htaccess
- What’s the difference between the capability remove_users and delete_users?
- How to restrict access to uploaded files?
- Automatically delete inactive users after 2 months
- Use author author display name in permalink structure for pages and posts
- Does this .htaccess security setting really work?
- How to change user_login with wp-cli?
- Delete all subscribers from wp_users and wp_usermeta a few thousand at a time
- Email user when password is reset by admin
- Replacing the WordPress password validation
- Ban a user and end their session
- Allowing users to edit only their page and nobody else’s
- How can 2 blogs share the same users
- alphabetically order role drop-down selection in dashboard
- WordPress auto login after registration not working
- Change the author slug from nickname to ID
- Execute a function when admin changes the user role
- How to let contributors to create a new revision(draft) editing their published posts
- how to use joomla password format in wordpress?
- How to do get_users() with multiple meta_keys
- Disallowing Users of a Custom Role from Deleting or Adding Administrators?
- What the user_status column?
- How to limit users to one comment per post
- Different back-end language for different users?
- Protecting direct access to PDF and ZIP unless user logged in (without plugin)
- Is it safe to store a user setting you don’t want the user to ever modify as a user option?
- Hide Admin Menu for Specific User ID who has administrator Role
- Migrating WordPress users into Disqus
- Problem with Hebrew characters in username
- Is there an upper limit for users in WP?
- How to display the status of users (online – offline) in archive.php
- Remove email verification when new user register
- How to change user`s avatar?
- How to set up User email verification after Signup?
- Allow up to 5 Concurrent Login Sessions
- How to let user set password on registration
- How to hide media uploads by other users in the Media menu?
- Show admin bar only for some USERS roles
- Change Login URL Without Plugin
- How to display custom user meta from registration in backend?
- Allowing an email as the username?
- How to work around “that email address has already been used” error?
- Get the name of user who updated post
- Disable delete user
- Grouping users under parent user