invisnet

<p>The REST API is essential for any modern web framework, but with it comes a huge attack surface. <em>WP REST API Security</em> reduces the attack surface by disabling all the REST API endpoints by default, allowing you to enable only those actually needed. Those that are enabled require authentication by default, allowing you to choose which to make public.</p>
<blockquote>
<p><strong>N.B.</strong> If you are using the new Block Editor you must keep nearly all the endpoints enabled for it to work, but none need be public.</p>
</blockquote>


WP REST API Security

Provides a UI to control which REST API endpoints are enabled and which require authentication.

Acato

Richard Korthuis

yoeridekker

<p>Are you facing speed issues, using the WordPress REST API? This plugin will allow WordPress to cache the responses of the REST API, making it much faster.</p>
<p>This plugin offers:</p>
<ul>
<li>Caching of all default WordPress REST API <code>GET</code>-endpoints.</li>
<li>Caching of (custom) post type endpoints.</li>
<li>Caching of (custom) taxonomy endpoints.</li>
<li>Automated flushing of caches if (some of) its contents are edited.</li>
<li>Manual flushing of all caches.</li>
<li>Manual flushing of specific caches.</li>
<li>A counter how many times a cache has been retrieved.</li>
<li>Specifying after what time the cache should be timed out.</li>
<li>Registering custom endpoints for caching.</li>
<li>Automatic cache regeneration.</li>
</ul>
<p><strong>WP REST Cache Pro</strong><br />
For more advanced features, check out our <a href="https://plugins.acato.nl/" rel="nofollow ugc">WP REST Cache Pro</a> plugin:</p>
<ul>
<li>Configure custom endpoints for caching through the wp-admin interface.</li>
<li>Configure relationships within endpoints.</li>
<li>No coding required.</li>
</ul>
<h3>Installation from within WordPress</h3>
<ol>
<li>Visit ‘Plugins > Add New’ (or ‘My Sites > Network Admin > Plugins > Add New’ if you are on a multisite installation).</li>
<li>Search for ‘WP REST Cache’.</li>
<li>Activate the WP REST Cache plugin through the ‘Plugins’ menu in WordPress.</li>
<li>Go to “after activation” below.</li>
</ol>
<h3>Installation manually</h3>
<ol>
<li>Upload the <code>wp-rest-cache</code> folder to the <code>/wp-content/plugins/</code> directory.</li>
<li>Activate the WP REST Cache plugin through the ‘Plugins’ menu in WordPress.</li>
<li>Go to “after activation” below.</li>
</ol>
<h3>After activation</h3>
<ol>
<li>Visit ‘Plugins > Must-Use’ (or ‘My Sites > Network Admin > Plugins > Must-Use’ if you are on a multisite installation).</li>
<li>Check if the ‘WP REST Cache – Must-Use Plugin’ is there, if not copy the file <code>wp-rest-cache.php</code> from the <code>/sources</code> folder of the WP REST Cache Plugin to the folder <code>/wp-content/mu-plugins/</code>.</li>
</ol>
<p><strong>Optionally:</strong><br />
The default timeout for caches generated by the WP REST Cache plugin is set to 1 year. If you want to change this:</p>
<ol>
<li>Visit ‘Settings > WP REST Cache’.</li>
<li>Change the Cache timeout.</li>
</ol>


WP REST Cache

I have been using this plugin on a few projects and it has been extremely useful, but recently I came across a few more complicated scenarios I needed to cater for and the plugin author has been extremely helpful in discussing the extra config that I needed. Definitely recommend. 

Very good plugin, very good support

slow api requests now respond in an instant. running this tool on multiple sites and it works almost by simply installing it. noice!


Great plugin! I use it for a headless WordPress instance with Nuxt 3, and it works perfectly fine.



The only thing I needed to change was the API endpoint since I created a custom endpoint to the route. But the FAQ cleared this up quickly and it works flawlessly. As a small suggestion I'd propose to add this option to the plugin's settings page for easier access.


Works well with headless WordPress and Nuxt 3


Nice one! Decreased response time by almost 60%.


Does the job

Enable caching of the WordPress REST API and auto-flush caches upon wp-admin editing.

WP REST API Security vs WP REST Cache