1.5.0

• added basic statistics to the settings page
• bugfix password forgotten protection

1.4.1

Bugfix error on login check

1.4.0

• added protection for the wp-sitemap.xml author disclosure

1.3.0

• added protection for the /feed endpoint
• added protection for the oEmbed endpoint

1.2.1

This release contains a bugfix for mail address detection and an updated documentation.

1.2.0

The plugin will stop user enumeration attacks on the login and password forgotten page by displaying a neutral message when either the username or password is wrong. When the username exists this will not be written in the error message anymore.

1.1.2

Bugfix username endpoint was blocked when protection is disabled but protection for id endpoint is enabled.

1.1.1

Bugfix for better REST API endpoint detection

1.1.0

added protection for REST API user enumeration

First release

Use the file wp-author-security.zip to upload the Plugin to your Wordpress installation. (Plugins -> Install -> Upload Plugin)