WP Author Security — WordPress Security Plugin
by mgm security partners GmbH · WordPress.org page · Website
WP Author Security has 400+ active installs on WordPress.org and 6,949 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on April 12, 2023, tested up to WordPress 6.2.11.
WP Author Security at a glance
Is WP Author Security well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- The REST API for users which will list all users with published posts by default. https://yourdomain.tld/wp-json/wp/v2/users
- The log in page where different error messages will indicate whether an entered user name or mail address exists or not. The plugin will display a neutral…
- The password forgotten function will also allow an attacker to check for the existence of a user. As for the log in page the plugin will display a neutral…
- Requesting the feed endpoint /feed of your blog will also allow others to see the username or display name of the author. The plugin will remove the name from…
- WordPress supports so-called oEmbeds. This is a technique to embed a reference to a post into another post. However, this reference will also contain the…
- Since WordPress 5.5 a default sitemap can be reached via /wp-sitemap.xml. This sitemap will disclose the usernames of all authors. If this should not be…
WP Author Security reviews and ratings
2 reviews on WordPress.org, with the most recent ones as their authors posted them.
2 reviews
- 5★
-
2
- 4★
-
0
- 3★
-
0
- 2★
-
0
- 1★
-
0
-
Works on my WP v6.4.3
So annoying to constantly change my username or modify themes to stop script kiddies and hackers from finding my usernames simply from looking at a theme's page source or running a basic script. This removed my username from the view source page. My site is functioning without errors despite this plugin not yet tested with my version of WP. No clue if there are other areas my username might be displayed that this plugin is missing. Hoping not. I first tried WP Ghost over and over but could not get past its sandboxed logon test. So this is the next best way of hiding my non-admin public facing author username (I never post with admin user). Anyhow thanks for this plugin.
andrebell82 -
Just please don't forget to update
Very very good , thank youI searched a lot until I found this plugin.Friends, other plugins will lose SEO by changing the url, but this plugin is not like thatJust the publisher, don't forget to update so that we don't have a problem and don't need another plugin
shahinsafari
Details
Protect against user enumeration attacks on author pages and other places where valid user names can be obtained.
The full description, screenshots and every review live on the WordPress.org page.
Rankings WP Author Security competes in
Tags
- author
- privacy
- security
- user enumeration
- wpscan
- Version
- 1.5.0
- Last updated
- Apr 12, 2023
- First published
- Aug 13, 2020
- Requires WordPress
- 4.7
- Tested up to
- 6.2.11
- Requires PHP
- 7.4
- Pricing
- Free on WordPress.org
WP Author Security FAQ
What does WP Author Security do?
According to its WordPress.org readme, WP Author Security offers The REST API for users which will list all users with published posts by default. https://yourdomain.tld/wp-json/wp/v2/users, The log in page where different error messages will indicate whether an entered user name or mail address exists or not. The plugin will display a neutral, The password forgotten function will also allow an attacker to check for the existence of a user. As for the log in page the plugin will display a neutral, Requesting the feed endpoint /feed of your blog will also allow others to see the username or display name of the author. The plugin will remove the name from and WordPress supports so-called oEmbeds. This is a technique to embed a reference to a post into another post. However, this reference will also contain the.
How many active installs does WP Author Security have?
WordPress.org reports 400+ active installs for WP Author Security as of September 7, 2026.
Is WP Author Security still maintained?
The last release was on April 12, 2023, more than a year ago. WordPress.org shows a warning on plugins that go this long without an update.
Is WP Author Security free?
WP Author Security is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.