This tiny and lightweight plugin removes all the rss feeds and hides usernames.
As of April 2026, Disable Feeds And Hide Usernames is a WordPress remove rss plugin with 300 active installations and a 4/5 rating from 3 reviews. It has been downloaded 4.2K+ times in total. Requires WordPress 3.0.1+ and PHP false+. Available on WordPress.org since 2017. Last updated 7 years ago — may have compatibility concerns. Top alternative: Small WP Security – SP SWS.
removes the rss feeds like below. For a simple CMS site it is not required.
* http://example.com/feed/
* http://example.com/feed/rss/
* http://example.com/feed/rss2/
* http://example.com/feed/rdf/
* http://example.com/feed/atom/
WordPress usernames can easily be guessed. If guessed it makes the attackers’ life easier especially in case of a targeted WordPress hack attack. Attackers can use a tool such as WPScan to guess your WordPress username or simply by entering a URL such as the following:
http://www.example.com/?author=1
If the author ID is valid then they will be redirected to the author URL, for example:
http://www.example.com/author/admin
The above is possible even when you change the WordPress user IDs. For example if…
| WordPress | 3.0.1+ requiredTested up to 5.0.25 |
| PHP | false+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.