I am trying to figure out if wordpress exposes the user e-mail or any other user information to crawlers/bots?
I have a couple of security plugins that have been blocking these bots IPs on the third failed login attempt. When I go through the log you can see that some bots are guessing your typical usernames (eg. "admin"). But there are some bots that actually guesses username's e-mail addresses (sometimes without the "@" or without the "." from .com). Which makes me wonder if this information is exposed by wordpress, or if somehow these bots are connecting the dot with other websites to gather this information?