Niels Lange

With WordPress 4.7 the REST API is part of the core. At the moment everyone has read access to the REST API. As a result of that a potential intruder can retrieve a list of all user slugs via <code>/wp-json/wp/v2/users</code>. This plugin disables the REST API user endpoints to obscure the user slugs.
<h3>Contribute</h3>
Contributions are more than welcome. Simply head over to <a href="https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/" rel="nofollow ugc">Github</a> and open an issue or a pull request.

SMNTCS Disable REST API User Endpoints

Disable the REST API user endpoints due to obscure user slugs.

YoOhw Studio

Advanced Accounts – Customize My Account Page / OTP Login & Registration for WooCommerce is an all-in-one solution to enhance your WooCommerce customer account area. It combines a versatile My Account page customizer with secure passwordless login features and a flexible membership system to control content, products, and user access.
The My Account page is one of the most frequently visited sections of any e-commerce site. This plugin allows you to tailor the account dashboard, simplify login and registration with OTP verification, and introduce membership-based access control to deliver personalized experiences for different user groups.
You can create membership levels, restrict content or products to members, and even offer exclusive discounts based on membership roles.
<a href="https://yoohw.com/product/woocommerce-advanced-accounts-premium/" rel="nofollow ugc">Premium version</a> | <a href="https://yoohw.com/docs/category/woocommerce-advanced-accounts/" rel="nofollow ugc">Documentation</a> | <a href="https://yoohw.com/support/" rel="nofollow ugc">Support</a> | <a href="https://sandbox.yoohw.com/demo/wcaa_demo.html" rel="nofollow ugc">Demo</a>
<h3>Key Features and Benefits</h3>
<ul>
<li>Membership Roles System: Create membership tiers using WordPress roles and manage them directly inside the plugin settings.</li>
<li>Membership Content Visibility: Use the <code>[yoaa_membership]</code> shortcode to control which users can view specific content based on membership levels.</li>
<li>Flexible Access Conditions: Display content only for specific membership levels, logged-in users, or guests.</li>
<li>OTP Login & Registration (SMS/Email): Improve login security and convenience by letting users log in with a one-time password (OTP) sent to their phone or email.</li>
<li>Phone & Email Verification: Ensure genuine users with verified contact details before accounts are fully activated.</li>
<li>Password Reset via OTP: Users can securely reset passwords using verification codes sent to their phone or email.</li>
<li>WooCommerce Login Page Integration: Automatically redirect WordPress login pages to the WooCommerce My Account login interface.</li>
<li>Mobile-Friendly & Responsive: Designed for smooth login and account management on mobile devices.</li>
<li>Extensibility and Compatibility: Built with WordPress standards and compatible with WooCommerce themes and multilingual plugins.</li>
</ul>
<h3>Membership Features (Free Version)</h3>
<ul>
<li>Membership Roles: Define membership levels using WordPress user roles.</li>
<li>Membership Role Management: Manage and configure membership roles directly inside the plugin settings.</li>
<li>Content Control Shortcode: Use the <code>[yoaa_membership]</code> shortcode to restrict or show content based on membership levels.</li>
<li>Flexible Visibility Conditions: Shortcodes support conditions for specific membership roles, logged-in users, or guests.</li>
</ul>
<h3>Premium Membership Features</h3>
<ul>
<li>Membership Products Page: Automatically generate a dedicated page that lists available membership plans, allowing customers to easily view, purchase, and upgrade membership tiers.</li>
<li>Multiple Membership Roles: Allow users to have multiple membership roles simultaneously.</li>
<li>Content Access Control: Restrict posts and pages by membership roles.</li>
<li>Custom Access Notices: Unauthorized users will see a customizable notice message instead of restricted content.</li>
<li>Optional Login Button: Guests can be prompted with a login button when trying to access restricted content.</li>
<li>Product Access Control: Restrict WooCommerce products by membership roles.</li>
<li>Product Access Messages: Restricted products can be hidden or replaced with a custom message for unauthorized users.</li>
<li>Membership-Based Discounts: Offer exclusive pricing or discounts for specific membership levels.</li>
<li>Flexible Shortcodes: Shortcodes support multiple membership levels and custom fallback messages.</li>
</ul>
<h3>Premium Tools</h3>
<ul>
<li>Username Migration Tool: Convert existing usernames into phone-based usernames with a dry-run preview and batch processing tool.</li>
</ul>
<h3>Other Premium Features</h3>
<ul>
<li>Add Unlimited Custom Endpoints: Create new tabs in the My Account page to display custom content or shortcodes.</li>
<li>Customize Existing Endpoint Content: Override or inject content into default WooCommerce account tabs.</li>
<li>Custom Icons for Account Menu: Assign built-in or uploaded icons to each account endpoint.</li>
<li>Role-Based / Members-Only Sections: Restrict account endpoints to specific roles or membership levels.</li>
<li>User Avatars and Profile Photos: Allow customers to upload profile images directly from their account page.</li>
<li>Block / Unblock Users: Suspend or reinstate user accounts without deleting data.</li>
<li>Account Erasure Requests: Provide users with GDPR-compliant data deletion requests.</li>
<li>Phone Number Updates with Verification: Allow users to securely update their phone number with SMS verification.</li>
<li>Extra Registration Fields: Add fields such as first name, last name, and birthday to the registration form.</li>
<li>Third-Party SMS Services: Integrate with Twilio and Textmagic for SMS verification.</li>
</ul>
<a href="https://yoohw.com/product/woocommerce-advanced-accounts-premium/" rel="nofollow ugc">Explore the Premium version here</a>
In summary, WooCommerce Advanced Accounts empowers you to take full control of your customers’ account experience. Customize the My Account dashboard, enable secure OTP login and registration, and introduce membership-based access to content, products, and exclusive pricing. Deliver personalized experiences for different user groups while enhancing security through verification. All these capabilities come in one lightweight plugin – eliminating the need to install multiple plugins for account customization, OTP authentication, and membership management.
<h3>Plugin Integrations</h3>
Blacklist Manager
Integrates with <a href="https://wordpress.org/plugins/wc-blacklist-manager/" rel="ugc">Blacklist Manager</a>. Once a customer’s phone number or email is verified through this plugin, Blacklist Manager can recognize it as verified during checkout when verification rules are enabled.
WooCommerce Loyalty – Points and Rewards (Premium)
Fully compatible with <a href="https://yoohw.com/product/woocommerce-loyalty/" rel="nofollow ugc">WooCommerce Loyalty – Points and Rewards</a>. Membership roles can work together with loyalty rewards, allowing store owners to offer points, rewards, and exclusive benefits to specific membership levels.
WooCommerce Subscriptions
Compatible with <a href="https://woocommerce.com/products/woocommerce-subscriptions/" rel="nofollow ugc">WooCommerce Subscriptions</a>. Sell membership plans as subscription products to enable recurring payments and automatic membership renewals.
<h3>External Services</h3>
This plugin connects to third-party and external services to deliver One-Time Passwords (OTPs), verify phone numbers, and provide licensing and notification features. These services are required for specific functionality and only transmit data when the related feature is used.
<ol>
<li><a href="https://yoohw.com/product/sms-credits/" rel="nofollow ugc">Yo Credits</a>: Used to send OTPs for phone verification, login, checkout, and password reset.</li>
<li><a href="https://www.twilio.com/" rel="nofollow ugc">Twilio</a>: Third-party SMS provider used when enabled or as a fallback.</li>
<li><a href="https://www.textmagic.com/" rel="nofollow ugc">Textmagic</a>: Alternative SMS gateway for OTP delivery.</li>
</ol>
IP-API (IP Geolocation): Used to detect country information for phone number formatting. 
YoOhw API Services: Used for licensing, subscriptions, site registration, updates, and plugin news.
All external services are configurable, and no data is sent unless the related feature is enabled or triggered by user action.

Advanced Accounts for WooCommerce – Membership / Customize My Account Page / OTP

Customize the WooCommerce “My Account” page, enable secure OTP login and registration via SMS/email, and create membership-based content access and di …

SMNTCS Disable REST API User Endpoints vs Advanced Accounts for WooCommerce – Membership / Customize My Account Page / OTP