Security risk

The WP User Manager is very good in principle and implementation and relatively easy to learn and set up. In my personal opinion and view, however, there is a potential security risk, as the user name is disclosed if the associated password is incorrect. This means that attackers have the first 50 per cent (username and/or email address). This error cannot be switched off or prevented at all.