Niels Lange

<p>With WordPress 4.7 the REST API is part of the core. At the moment everyone has read access to the REST API. As a result of that a potential intruder can retrieve a list of all user slugs via <code>/wp-json/wp/v2/users</code>. This plugin disables the REST API user endpoints to obscure the user slugs.</p>
<h3>Contribute</h3>
<p>Contributions are more than welcome. Simply head over to <a href="https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/" rel="nofollow ugc">Github</a> and open an issue or a pull request.</p>


SMNTCS Disable REST API User Endpoints

Disable the REST API user endpoints due to obscure user slugs.

YoOhw Studio

<p>Advanced Accounts for WooCommerce helps store owners improve the WooCommerce My Account experience with account verification, OTP login, password reset by OTP, and membership content access.</p>
<p>Use it to make customer accounts easier to manage, reduce fake registrations, verify phone or email ownership, and show selected content only to the right customers.</p>
<p><a href="https://yoohw.com/product/woocommerce-advanced-accounts-premium/" rel="nofollow ugc">Premium version</a> | <a href="https://docs.yoohw.com/category/woocommerce-advanced-accounts-premium/" rel="nofollow ugc">Documentation</a> | <a href="https://yoohw.com/support/" rel="nofollow ugc">Support</a> | <a href="https://sandbox.yoohw.com/demo/wcaa_demo.html" rel="nofollow ugc">Demo</a></p>
<h4>WooCommerce My Account Customization</h4>
<p>Improve the customer account area without editing theme templates. You can manage WooCommerce account behavior from plugin settings and keep the experience aligned with your store.</p>
<p>Free account features include:</p>
<ul>
<li>Redirect the default WordPress login page to WooCommerce My Account.</li>
<li>Support phone number based account login.</li>
<li>Disable email requirement when using phone-first registration.</li>
<li>Keep checkout and account login flows connected to WooCommerce.</li>
<li>Migrate existing customer usernames to phone-number based usernames with dry-run and batch controls.</li>
</ul>
<p>Premium account customization features include:</p>
<ul>
<li>Add custom My Account endpoints.</li>
<li>Customize endpoint labels, slugs, icons, order, and visibility.</li>
<li>Show account tabs only to selected roles or membership levels.</li>
<li>Add profile photos and extra registration fields.</li>
<li>Block or unblock customer accounts without deleting user data.</li>
</ul>
<h4>OTP Login and Account Verification</h4>
<p>Add secure one-time password flows for WooCommerce customers. The plugin supports OTP login, account registration verification, and password reset verification by phone or email.</p>
<p>Verification features include:</p>
<ul>
<li>WooCommerce OTP login by phone or email.</li>
<li>Phone verification during account registration.</li>
<li>Email verification during account registration.</li>
<li>Password reset using OTP.</li>
<li>Server-side OTP expiration, failed attempt limits, resend cooldown, and resend limits.</li>
<li>Verified phone and email status for compatible checkout protection workflows.</li>
</ul>
<p>SMS delivery is available through Yo Credits in the free plugin. Twilio and Textmagic are available in the Premium version when explicitly enabled.</p>
<h4>Membership Content Access</h4>
<p>Create membership levels with WordPress roles and use them to control who can see selected content.</p>
<p>Free membership features include:</p>
<ul>
<li>Create and manage membership roles.</li>
<li>Use the <code>[yoaa_membership]</code> shortcode to show content to selected roles.</li>
<li>Show or hide shortcode content for logged-in users or guests.</li>
<li>Build simple member-only pages without a separate membership plugin.</li>
</ul>
<p>Premium membership features include:</p>
<ul>
<li>Restrict posts, pages, and WooCommerce products by membership level.</li>
<li>Create a membership products page.</li>
<li>Allow customers to hold multiple membership roles.</li>
<li>Show custom access notices for restricted content.</li>
<li>Offer membership-based product discounts.</li>
<li>Support WooCommerce Subscriptions for recurring membership plans.</li>
</ul>
<h4>Integrations</h4>
<p>Advanced Accounts for WooCommerce works with these related tools:</p>
<ul>
<li><a href="https://wordpress.org/plugins/wc-blacklist-manager/" rel="ugc">Blacklist Manager</a> – Recognizes verified phone numbers and email addresses during checkout checks.</li>
<li><a href="https://woocommerce.com/products/woocommerce-subscriptions/" rel="nofollow ugc">WooCommerce Subscriptions</a> – Premium membership plans can work with subscription products.</li>
<li><a href="https://yoohw.com/product/woocommerce-loyalty/" rel="nofollow ugc">WooCommerce Loyalty – Points and Rewards</a> – Premium membership roles can be used with loyalty rewards.</li>
</ul>
<h3>External Services</h3>
<p>This plugin connects to third-party or external services only when the related feature is enabled or triggered by an administrator or customer action.</p>
<h4>Yo Credits</h4>
<p>Service: https://yoohw.com/product/sms-credits/</p>
<p>Yo Credits is used to generate a site SMS key, send OTP messages for phone verification, OTP login, checkout verification, and password reset, and update remaining SMS quota.</p>
<p>Requests may include:</p>
<ul>
<li>Site domain.</li>
<li>Administrator email when generating an SMS key.</li>
<li>SMS key.</li>
<li>Destination phone number.</li>
<li>OTP message content.</li>
</ul>
<h4>Twilio</h4>
<p>Service: https://www.twilio.com/</p>
<p>Twilio is an SMS provider available in the Premium version when explicitly enabled by the store administrator.</p>
<h4>Textmagic</h4>
<p>Service: https://www.textmagic.com/</p>
<p>Textmagic is an SMS provider available in the Premium version when explicitly enabled by the store administrator.</p>
<p>No visitor IP geolocation, product-news subscription, or catalog feed request is sent by the free plugin.</p>
<h3>Bundled Libraries</h3>
<ul>
<li>Font Awesome Free 6.7.2: bundled in <code>font/fontawesome/</code>. License details and source are available at https://fontawesome.com/license/free and https://github.com/FortAwesome/Font-Awesome.</li>
<li>International Telephone Input 29.0.5: bundled in <code>js/intl-tel-input/</code>, including UI locale data. License and source are available at https://github.com/jackocnr/intl-tel-input.</li>
</ul>


Advanced Accounts for WooCommerce

Customize WooCommerce My Account, add OTP login and verification, and control member-only content with roles.

SMNTCS Disable REST API User Endpoints vs Advanced Accounts for WooCommerce