tstephenson

My use case is to allow content authors to write help pages in WordPress. 
This content is fetched and embedded into a single page application hosted on another domain.
AJAX requests to this site from another are typically disallowed by the browser’s security model. 
To permit legitimate uses the requesting browser may include an Origin header containing its domain. 
This plugin uses the Origin header to decide whether to allow the request or not. 
Allowed domains can be specified in the plugin’s Settings page.

WP-CORS

Allows AJAX requests from other sites to integrate content from your site using the CORS standard.

markmym

Every headless WordPress project requires the same setup: expose ACF fields to the REST API, configure CORS headers for your JavaScript frontend, and register a contact form endpoint.
HWConnector Lite moves all of that out of functions.php and into a clean, tabbed admin settings page.
<h4>Features</h4>
REST API Tab 
* Expose ACF custom fields for post, page, and one Custom Post Type to the WordPress REST API 
* No PHP required — configure through the admin dashboard
CORS Tab 
* Add one allowed frontend origin (Next.js, Astro, Nuxt, etc.) through a simple field 
* Correct headers sent for GET, POST, and OPTIONS (preflight) requests 
* Origin-matched headers — only the requesting origin is echoed back
Endpoints Tab 
* <code>POST /wp-json/site/v1/contact</code> — accepts name, email, message and forwards to your admin email 
* Configurable namespace and send-to email
Security Tab 
* Disable XML-RPC with one toggle (default: ON) 
* Hide WordPress version from page source and RSS (default: ON)
<h4>Pro Version</h4>
<a href="https://winstonmark.gumroad.com/l/dchlm" rel="nofollow ugc">HWConnector Pro</a> unlocks:
<ul>
<li>Unlimited CORS origins</li>
<li>Unlimited Custom Post Types in the REST API</li>
<li>Newsletter endpoint — <code>POST /wp-json/site/v1/newsletter</code> with FluentCRM integration</li>
</ul>
<h4>Who it’s for</h4>
Developers building headless WordPress sites with Next.js, Astro, Nuxt, SvelteKit, or any other JavaScript frontend who want a clean, reusable setup instead of copying functions.php boilerplate on every project.
<h4>Requirements</h4>
<ul>
<li>WordPress 5.8+</li>
<li>PHP 7.4+</li>
<li>ACF (Advanced Custom Fields) — optional, required only for the REST API tab</li>
</ul>

HWConnector Lite – Headless REST API & CORS

Configure ACF REST API, CORS, and a contact form endpoint for headless WordPress — all through the admin dashboard, without touching functions.php.

WP-CORS vs HWConnector Lite – Headless REST API & CORS