kimipooh

WordPress redirects /?author=(number) to /author/(userID) if the author id exists. This is the security vulnerability because an internet user might be able to know all User ID and the user name in a website using WordPress.
If you can control the configuration of a web server, you had better use the rewrite rule (Search as “Block Author URLs”) for reducing the system load of WordPress.
The plugin prevents the security vulnerability regarding the author archive redirection.
Detailed Behavior 
1. It isn’t applied in the admin dashboard. 
2. If “author” query in URL (QUERY_STRING) exists, displays 404 error. 
3. If “/author/” in REQUEST_URI involves, redirects to the top page. 
4. Apply to the “redirect_canonical” hook, too.

Disable Author Archive Redirection

The plugin disables the author archive redirection.

shawfactor

This plugin overwrites the user_nicename for WordPress users with the user ID, this creates an extra level of security.
It also ensure every user has a url even if they have not authored a post.
Admins can also edit the user_nicename in the backend.
Like this plugin? Please consider <a href="https://wordpress.org/support/view/plugin-reviews/lh-number-user-nicename/" rel="ugc">leaving a 5-star review</a>.
Love this plugin or want to help the LocalHero Project? Please consider <a href="https://lhero.org/portfolio/lh-number-user-nicename/" rel="nofollow ugc">making a donation</a>.

LH Number User Nicename

This plugin overwrites the user nicename for users in wordpress

Disable Author Archive Redirection vs LH Number User Nicename