WP Author Security is a free WordPress plugin designed to bolster security against user enumeration attacks. It effectively hides sensitive author information by disabling author pages or limiting their visibility based on post publication status. This plugin addresses vulnerabilities by ensuring that usernames and other identifying details are not easily accessible to potential attackers, which can help mitigate risks associated with brute force and social engineering attacks.

The plugin also offers comprehensive protection across various areas susceptible to user enumeration. It neutralizes login error messages, modifies REST API responses to conceal user identities, and removes author names from feeds and oEmbeds. Additionally, it provides the option to disable the default WordPress sitemap feature, ensuring that usernames are not exposed. Overall, WP Author Security is a robust solution for enhancing the privacy and security of WordPress sites.