How Do Hackers Mine WordPress for Admin Email Addresses?
How hackers actually find WordPress admin email addresses: RSS feeds, the REST API, author-ID enumeration, Gravatar lookups, and unprotected WHOIS records. Eight leak vectors and the exact steps to close each one.