WP Author Security

WP Author Security is a lightweight but powerful plugin to protect against user enumeration attacks on author pages and other places where valid user names can be obtained.

By default, WordPress will display some sensitive information on author pages.
The author page is typically called by requesting the URI https://yourdomain.tld/?author=<id> or with permalinks https://yourdomain.tld/author/<username>.
The page will include (depending on your theme) the full name (first and last name) as well as the username of the author which is used to log in to WordPress.

In some cases, it is not wanted to expose this information to the public. An attacker is able to brute force valid IDs or valid usernames. This information might be used for further attacks like social engineering attack…