ksym04

<p>Turn off JSON REST API on your website to anonymous users and prevent unauthorized requests from using the REST API to get information from your website.</p>
<p>Since the release of WordPress 4.0 came out, there have been a lot of hackers exploiting the vulnerabilities of the REST API. By installing this plugin, you will effectively prevent and disable the use of REST API from unauthorized users and protect the information on your website from being accessible. If someone tries to access the REST API on your site, the plugin will return an authentication error on the API endpoints, for any unauthorized users trying to access it.</p>
<p>While WordPress REST API vulnerability exploits continue this plugin effectively prevent and disable the used of REST API from accessing information from your website, this plugin return authentication error and disable all endpoints for any user not logged in on your website.</p>
<h3>Translations</h3>
<ul>
<li>English (en_US)</li>
</ul>


Turn Off REST API

Prevents unauthorized requests from using the WP REST API.

MaxtDesign

<p><strong>MaxtDesign REST API Control</strong> gives you complete control over who can access your WordPress REST API and which endpoints are available.</p>
<p>By default, WordPress exposes a REST API to the public, which can reveal usernames, post data, and site structure to anyone. This plugin lets you lock down the REST API for unauthenticated visitors while keeping it fully functional for logged-in users and the plugins that need it.</p>
<h4>Key Features</h4>
<ul>
<li><strong>One-click disable</strong> — Block all REST API access for unauthenticated users with a single toggle.</li>
<li><strong>Endpoint whitelisting</strong> — Auto-discovers all registered REST API endpoints and lets you whitelist specific ones, even when the API is disabled.</li>
<li><strong>Per-role access control</strong> — Restrict REST API access for specific user roles with individual endpoint whitelists.</li>
<li><strong>Smart defaults</strong> — Automatically detects Contact Form 7 and WooCommerce and whitelists their required endpoints on activation.</li>
<li><strong>Zero frontend footprint</strong> — No CSS, JavaScript, or HTTP requests are added to your frontend. Ever.</li>
<li><strong>Lightweight</strong> — No database queries on frontend requests. Uses a single autoloaded option.</li>
<li><strong>Import/Export</strong> — Transfer settings between sites with JSON export and import.</li>
<li><strong>Clean uninstall</strong> — Removes all plugin data when deleted. Leaves no trace.</li>
</ul>
<h4>How It Works</h4>
<p>The plugin uses the <code>rest_authentication_errors</code> filter — the correct, modern WordPress approach — to intercept REST API requests early in the lifecycle, before any endpoint logic executes. This means blocked requests have virtually zero performance impact.</p>
<h4>Built for Performance</h4>
<p>This plugin follows the MaxtDesign performance-first philosophy:</p>
<ul>
<li>Zero frontend asset loading (no CSS, no JS, no HTTP requests)</li>
<li>Admin assets load only on the plugin’s own settings page</li>
<li>Single autoloaded database option — no extra queries</li>
<li>Filter fires before endpoint logic — blocked requests are fast</li>
</ul>
<h3>Privacy</h3>
<p>This plugin makes no external HTTP requests, sets no cookies, loads no third-party scripts, and collects no analytics. It does not track usage and never “calls home.” It stores a single settings option (<code>mdra_settings</code>) in your database and nothing else; that option is removed when you delete the plugin. No personal or visitor data is processed or transmitted.</p>


MaxtDesign REST API Control

Full control over your WordPress REST API. Block, restrict, or whitelist endpoints per user role. Lightweight, fast, zero frontend footprint.

Turn Off REST API vs MaxtDesign REST API Control