This plugin to avoids user enumeration in the WordPress login form. It does so by simply always returning the same error
message, no matter whether only the password is incorrect or both the username an the password. The message returned
(English) is “Invalid credentials.”.