Beschrijving
By default, anyone can request /wp-json/wp/v2/users on a WordPress site and get a list of every author’s username slug. Attackers use that list to guess logins.
SMNTCS Disable REST API User Endpoints removes the user endpoints from the REST API for visitors who are not logged in. Logged-in users and everything else in the REST API keep working, including the block editor.
There are no settings. Activate the plugin and the user endpoints are gone.
Contribute
Contributions are more than welcome. Simply head over to GitHub and open an issue or a pull request.
Installatie
- Upload
smntcs-disable-rest-api-user-endpointsto the/wp-content/plugins/directory. - Activate the plugin through the
Pluginsmenu in WordPress.
Beoordelingen
Bijdragers & ontwikkelaars
“SMNTCS Disable REST API User Endpoints” is open source software. De volgende personen hebben bijgedragen aan deze plugin.
Bijdragers
“SMNTCS Disable REST API User Endpoints” is vertaald in 5 localen. Dank voor de vertalers voor hun bijdragen.
Vertaal “SMNTCS Disable REST API User Endpoints” in je eigen taal.
Interesse in ontwikkeling?
Bekijk de code, haal de SVN repository op, of abonneer je op het ontwikkellog via RSS.
Changelog
2.6 (2026.09.26)
- Test up to WordPress 7.1
- Update development dependencies and GitHub Actions
2.5 (2026.08.14)
- Keep REST API user endpoints available for logged-in users (#33)
- Test up to WordPress 7.0
2.4 (2024.12.31)
- Test up to WordPress 6.7
2.3 (2024.10.19)
- Test up to WordPress 6.6
2.2 (2023.10.15)
- Test up to WordPress 6.4
- Convert code to OOP
2.1 (2023.03.11)
- Test up to WordPress 6.2
2.0 (2022.12.03)
- Test up to WordPress 6.1
1.9 (2022.06.09)
- Test up to WordPress 6.0
1.8 (2021.12.31)
- Test up to WordPress 5.8
1.7 (2021.05.01)
1.6 (2021.01.08)
- Test up to WordPress 5.6
1.5 (2020.05.10)
1.4 (2020.05.10)
- Update plugin header
- Test up to WordPress 5.4
1.3 (2019.12.26)
1.2 (2019.04.05)
- Refactor based on PHPCS and WPCS
1.1 (2019.02.20)
- Test up to WordPress 5.1
1.0 (2018.03.27)
- Initial release