SMNTCS Disable REST API User Endpoints

Leírás

By default, anyone can request /wp-json/wp/v2/users on a WordPress site and get a list of every author’s username slug. Attackers use that list to guess logins.

SMNTCS Disable REST API User Endpoints removes the user endpoints from the REST API for visitors who are not logged in. Logged-in users and everything else in the REST API keep working, including the block editor.

There are no settings. Activate the plugin and the user endpoints are gone.

Contribute

Contributions are more than welcome. Simply head over to GitHub and open an issue or a pull request.

Telepítés

  1. Upload smntcs-disable-rest-api-user-endpoints to the /wp-content/plugins/ directory.
  2. Activate the plugin through the Plugins menu in WordPress.

Vélemények

2021.05.10. 1 reply
Great plugin, works as it should, a must for any Wordpress site.
2017.04.06.
Does what is says, and you really shoud use this on all your sites. I just can't imagine your woocommerce customers login names being exposed via the REST API. Though the REST API is an amazing feature Kudos on this !!!
2 (az összes) vélemény olvasása

Közreműködők és fejlesztők

“SMNTCS Disable REST API User Endpoints” egy nyílt forráskódú szoftver. A bővítményhez a következő személyek járultak hozzá:

Közreműködők

“SMNTCS Disable REST API User Endpoints” 5 nyelvre lett lefordítva. Köszönet a fordítóknak az áldozatos munkájukért!

“SMNTCS Disable REST API User Endpoints” fordítása a saját nyelvünkre.

Érdekeltek vagyunk a fejlesztésben?

Browse the code, check out the SVN repository, or subscribe to the development log by RSS.

Változási napló

2.6 (2026.09.26)

  • Test up to WordPress 7.1
  • Update development dependencies and GitHub Actions

2.5 (2026.08.14)

2.4 (2024.12.31)

  • Test up to WordPress 6.7

2.3 (2024.10.19)

  • Test up to WordPress 6.6

2.2 (2023.10.15)

  • Test up to WordPress 6.4
  • Convert code to OOP

2.1 (2023.03.11)

  • Test up to WordPress 6.2

2.0 (2022.12.03)

  • Test up to WordPress 6.1

1.9 (2022.06.09)

  • Test up to WordPress 6.0

1.8 (2021.12.31)

  • Test up to WordPress 5.8

1.7 (2021.05.01)

1.6 (2021.01.08)

  • Test up to WordPress 5.6

1.5 (2020.05.10)

1.4 (2020.05.10)

1.3 (2019.12.26)

1.2 (2019.04.05)

  • Refactor based on PHPCS and WPCS

1.1 (2019.02.20)

  • Test up to WordPress 5.1

1.0 (2018.03.27)

  • Initial release