wpscan

https://www.digitalocean.com/community/tutorials/how-to-use-wpscan-to-test-for-vulnerable-plugins-and-themes-in-wordpress

http://wordpress.stackexchange.com/questions/46469/can-i-prevent-enumeration-of-usernames