WordPress by default gives a hint or in fact, confirms the username if anyone uses a wrong password with a correct username. This could actually be a little risky and could lead to brute force attacks. So by just adding some simple codes, you can easily resolve this issue and display any custom message if anyone uses the wrong username or password.