Thanks Nihil but some websites including facebook have this security gap. On facebook, if you know the email address, you might be able to find the profile through search ... However I guess it depends on the security options set by that user ...

So I thought maybe there would be such a bug on Wordpress too