Discovering the login names of a website. In WordPress they are revealed, for example, by the address /wp-json/wp/v2/users or /?author=1. Knowing a username makes a password-guessing attack easier, which is why these paths are closed off.
FAQ / Glossary