內容簡介
FormCourier User Enumeration Protection 外掛旨在減少 WordPress 使用者名稱和作者資訊的公開暴露，並在不禁用整個 REST API 的情況下保護網站安全。
【主要功能】
• 阻擋未認證訪客訪問 /wp-json/wp/v2/users
• 阻擋個別 REST 使用者端點
• 返回 404 響應以阻擋數字 ?author=ID 枚舉
• 隱藏公共 /author/username/ 存檔頁面選項
• 移除核心 WordPress 使用者網站地圖
• 替換顯示的 WordPress 登入錯誤為一般錯誤訊息
外掛標籤
開發者團隊
② 後台搜尋「FormCourier User Enumeration Protection」→ 直接安裝（推薦）
原文外掛簡介
FormCourier User Enumeration Protection reduces public exposure of WordPress usernames and author information without disabling the entire REST API.
The plugin:
Blocks /wp-json/wp/v2/users for unauthenticated visitors.
Blocks individual REST user endpoints such as /wp-json/wp/v2/users/1.
Blocks numeric ?author=ID enumeration and returns a 404 response.
Adds an option to hide public /author/username/ archive pages.
Removes the core WordPress user sitemap to reduce public author enumeration.
Replaces revealing WordPress login errors with a generic error message.
Keeps REST user endpoints available to authenticated users.
Does not collect, transmit, or share data with external services.
No external account, API key, or third-party service is required.
Settings
Go to Settings > User Enumeration Protection.
The Hide public author archives option controls whether normal /author/username/ archive pages are available.
When enabled, public author archive URLs return 404.
When disabled, normal author archives remain available. Numeric ?author=ID enumeration remains blocked regardless of this setting.
Privacy
This plugin does not collect, store, transmit, or share personal data with any external service.
The plugin stores one WordPress option that controls whether public author archives are hidden. This option is removed when the plugin is uninstalled.
