kimipooh

WordPress redirects /?author=(number) to /author/(userID) if the author id exists. This is the security vulnerability because an internet user might be able to know all User ID and the user name in a website using WordPress.
If you can control the configuration of a web server, you had better use the rewrite rule (Search as “Block Author URLs”) for reducing the system load of WordPress.
The plugin prevents the security vulnerability regarding the author archive redirection.
Detailed Behavior 
1. It isn’t applied in the admin dashboard. 
2. If “author” query in URL (QUERY_STRING) exists, displays 404 error. 
3. If “/author/” in REQUEST_URI involves, redirects to the top page. 
4. Apply to the “redirect_canonical” hook, too.

Disable Author Archive Redirection

The plugin disables the author archive redirection.

keithws

Stop redirects from URLs containing the <code>author</code> query parameter and user ID to permalinks with usernames to make it a little harder to iterate through the system and collect valid usernames.

No Author Redirect

Stop redirects from URLs containing the author query parameter and user ID to permalinks with usernames to make it a little harder to iterate through  …

Disable Author Archive Redirection vs No Author Redirect