Zoom is a POC of how exposed WP-JSON API can be attacked. It can enumerate wordpress users in nearly 1 second.

Zoom will run on any device having python2 or python3.
Argument syntax is following:

python zoom.py -u <wordpress site>