I noticed a week or so back several attempts to login using one of our valid usernames. I created a new account for that user, and verified that the Wordfence is set to block /?author=N scans. However attempts were very soon logged against the new username; accordingly I’ve just tried ?author=1 and sure enough, it shows her user name.
This is using The7.2 theme on a live site, and I’m rather worried about it. Why isn’t WF blocking these scans?