Niels Lange

With WordPress 4.7 the REST API is part of the core. At the moment everyone has read access to the REST API. As a result of that a potential intruder can retrieve a list of all user slugs via <code>/wp-json/wp/v2/users</code>. This plugin disables the REST API user endpoints to obscure the user slugs.
<h3>Contribute</h3>
Contributions are more than welcome. Simply head over to <a href="https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/" rel="nofollow ugc">Github</a> and open an issue or a pull request.

SMNTCS Disable REST API User Endpoints

Disable the REST API user endpoints due to obscure user slugs.

YoOhw Studio

Advanced Account – WooCommerce Customize My Account Page / OTP Login & Registration is an all-in-one solution to enhance your WooCommerce customer account area. It combines a versatile My Account page customizer with powerful passwordless login features, helping you deliver a better user experience and improve security. The My Account page is one of the most frequently visited sections of any e-commerce site – this plugin lets you tailor that page to your needs and make logging in or registering easier with OTP verification.
<a href="https://yoohw.com/product/woocommerce-advanced-account-premium/" rel="nofollow ugc">Premium version</a> | <a href="https://yoohw.com/docs/category/woocommerce-advanced-account/" rel="nofollow ugc">Documentation</a> | <a href="https://yoohw.com/support/" rel="nofollow ugc">Support</a> | <a href="https://sandbox.yoohw.com/demo/wcaa_demo.html" rel="nofollow ugc">Demo</a>
<h3>Key Features and Benefits</h3>
<ul>
<li>Customize Default Account Endpoints: Easily reorder, rename, or remove WooCommerce’s default My Account menu items (Dashboard, Orders, Downloads, etc.) to suit your site. You can declutter or relabel sections without any coding, making the account dashboard more intuitive for your users.</li>
<li>OTP Login & Registration (SMS/Email): Improve login security and convenience by letting users log in with a one-time password (OTP) sent to their phone or email. No more forgotten passwords – users can simply enter the code sent to their device to log in. You can also enable OTP-based registration (verification codes sent during signup) to verify user contact info. These features can help reduce barriers to account creation, improve user security, and increase engagement.</li>
<li>Phone & Email Verification: Ensure genuine users with verified contact details. The plugin can require new users to verify their phone number via SMS OTP or verify their email address by code/link before an account is fully activated. This keeps fake or typo emails out and confirms that each customer has a valid phone – useful for order notifications and security.</li>
<li>Password Reset via OTP: Along with standard email resets, users can opt to reset their password by entering a code sent to their verified email or phone. This provides a quick, secure recovery method, especially for users who prefer mobile verification.</li>
<li>WooCommerce Login Page Integration: The plugin can automatically redirect any visits to the default WordPress <code>wp-login.php</code> page to your WooCommerce “My Account” login/register screen. This funnels users through a single, branded login flow and hides the plain WP login, creating a seamless experience.</li>
<li>Mobile-Friendly & Responsive: All account pages and OTP inputs are designed to be mobile-first. Registration and login via phone number (OTP) are optimized for smartphones, so users on mobile can sign up or sign in effortlessly.</li>
<li>Extensibility and Compatibility: Built to work with any WooCommerce-compatible theme – it simply extends WooCommerce’s account template, so your styling remains consistent. The plugin is coded with WordPress standards, providing hooks and filters for developers to extend functionality. It’s translation-ready and compatible with WPML for multilingual sites. (It also integrates with the “Blacklist Manager” plugin, recognizing verified emails/phones during checkout validation.)</li>
</ul>
<h3>Premium Features</h3>
<ul>
<li>Add Unlimited Custom Endpoints: Create new account page tabs to display any content you want – e.g. a FAQ section, profile details, support tickets, exclusive downloads, or links to other pages. Each custom endpoint can show formatted text, images, videos, or even shortcodes from other plugins (for example, coupon wallets or membership info). You can even add direct links in the account menu (to your shop, an external URL, etc.) for quick access.</li>
<li>Customize Existing Enpoint Content: Override or inject content into any of the default WooCommerce My Account tabs (Dashboard, Orders, Downloads, etc.). Swap out the standard text for custom messaging, promotional banners, embedded videos, or dynamic data—without touching template files.</li>
<li>Add More or Upload new Icons: Choose from a built-in icon library or upload your own SVG/PNG icons to visually represent each endpoint in the account menu. Easily assign icons per tab for a more branded, intuitive navigation experience.</li>
<li>Role-Based / Members-Only Sections: Restrict any account endpoint (default or custom) to specific user roles or membership plans. For instance, show certain dashboard tabs only to wholesale customers, or create members-only areas for your VIP/Premium users. This allows you to personalize the user experience and deliver relevant content to each user group.</li>
<li>User Avatars and Profile Photos: Let customers upload or choose an avatar directly from their My Account page. Automatically resize/crop uploads, store them in a dedicated folder, and replace Gravatar throughout your site with the custom image.</li>
<li>Block / Unblock the Users: Instantly suspend or reinstate user accounts without deleting their data. Prevent blocked users from logging in or placing orders, and display a custom “Account Suspended” message when they attempt access.</li>
<li>Account Erasure Request: Comply with GDPR/CCPA by adding a self-service “Erase My Data” button in My Account. When requested, the system will anonymize or delete all personal data, then notify the user (and admin) upon completion.</li>
<li>Change Account Phone Number: Add a secure phone-number field with SMS-based verification. Users can click “Change Number,” receive a one-time code via Twilio or Textmagic, enter it on-site, and have their profile updated once verified.</li>
<li>Add Birth date for Users: Collect users’ birth dates during registration or on the edit-account form. Enforce minimum-age checks (e.g. 13+), make the field optional or required, and display a birthday greeting or age-based offers on their dashboard.</li>
<li>More Fields for Registration form: Extend the WooCommerce signup form with extra inputs—First Name, Last Name, Birthday (with date picker), and more. All entries are saved to user meta and editable from My Account.</li>
<li>Third Party SMS Services: Integrate with Twilio and Textmagic (with support for additional gateways on request) to power phone verification. Manage API credentials, message templates, and send/receive workflows directly from your WordPress dashboard.</li>
</ul>
<a href="https://yoohw.com/product/woocommerce-advanced-account-premium/" rel="nofollow ugc">Explore the Premium version here</a>
In summary, WooCommerce Advanced Account – Customize My Account Page / OTP Login & Registration empowers you to take full control of your customers’ account page and their login experience. Offer a personalized dashboard for your store (great for online stores, marketplaces, membership sites, eLearning platforms, etc.) while enhancing security through OTP verification. All these capabilities come in one lightweight plugin – eliminating the need to install multiple separate plugins for account customization and OTP login.
<h3>Plugin Integrations</h3>
Blacklist Manager
Seamlessly integrates with <a href="https://wordpress.org/plugins/wc-blacklist-manager/" rel="ugc">Blacklist Manager</a>—once a customer’s phone number or email is verified through this plugin, <a href="https://wordpress.org/plugins/wc-blacklist-manager/" rel="ugc">Blacklist Manager</a> will recognize it as already verified during checkout when verification is enabled.
<h3>External Services</h3>
This plugin integrates with three SMS gateway providers to deliver One-Time Passwords (OTPs) for phone number verification:
<ol>
<li><a href="https://yoohw.com/product/sms-credits/" rel="nofollow ugc">Yo Credits by YoOhw</a></li>
<li><a href="https://www.twilio.com/" rel="nofollow ugc">Twilio</a></li>
<li><a href="https://www.textmagic.com/" rel="nofollow ugc">Textmagic</a></li>
</ol>
You can choose which provider to use (or fall back automatically), set custom message templates, define resend intervals, and monitor usage directly from WordPress.

Advanced Account – WooCommerce Customize My Account Page / OTP Login & Registration

Customize the WooCommerce “My Account” page with custom endpoints, enable secure OTP login and registration via SMS/email.

SMNTCS Disable REST API User Endpoints vs Advanced Account – WooCommerce Customize My Account Page / OTP Login & Registration