kimipooh

WordPress redirects /?author=(number) to /author/(userID) if the author id exists. This is the security vulnerability because an internet user might be able to know all User ID and the user name in a website using WordPress.
If you can control the configuration of a web server, you had better use the rewrite rule (Search as “Block Author URLs”) for reducing the system load of WordPress.
The plugin prevents the security vulnerability regarding the author archive redirection.
Detailed Behavior 
1. It isn’t applied in the admin dashboard. 
2. If “author” query in URL (QUERY_STRING) exists, displays 404 error. 
3. If “/author/” in REQUEST_URI involves, redirects to the top page. 
4. Apply to the “redirect_canonical” hook, too.

Disable Author Archive Redirection

The plugin disables the author archive redirection.

Devi

The plugin Changes wordpress user slug for security reasons, it prevents access to the usernames of registered users on your site.
By using “Simply Change Author URL” The WordPress default users(authors) Slug and URL addresses will be changed automatically.
By Default Author URL is: <code>example.com/author/[username]/</code> 
after install this plugin URLs will be changed to: <code>example.com/user/[user_id]/</code>
This will protects the usernames from being easily accessible by cyber attackers.
This plugin also: 
1. Removes wordpress api user endpoints. (they contain information about users) 
1. Changes canonical links generated by yoast.

Simply Change Author URL

Changes wordpress user slug for security, it prevents access to the usernames of registered users on your site.

Disable Author Archive Redirection vs Simply Change Author URL