{"id":52671,"date":"2016-12-24T04:09:01","date_gmt":"2016-12-24T04:09:01","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/smntcs-disable-rest-api-user-endpoints\/"},"modified":"2024-12-31T06:23:22","modified_gmt":"2024-12-31T06:23:22","slug":"smntcs-disable-rest-api-user-endpoints","status":"publish","type":"plugin","link":"https:\/\/sw.wordpress.org\/plugins\/smntcs-disable-rest-api-user-endpoints\/","author":14617105,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"2.4","stable_tag":"2.4","tested":"6.7.5","requires":"5.5","requires_php":"5.6","requires_plugins":null,"header_name":"SMNTCS Disable REST API User Endpoints","header_author":"Niels Lange","header_description":"Disable the REST API user endpoints due to security reasons","assets_banners_color":"6b6b6b","last_updated":"2024-12-31 06:23:22","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/github.com\/nielslange\/smntcs-disable-rest-api-user-endpoints","header_author_uri":"https:\/\/nielslange.de","rating":5,"author_block_rating":0,"active_installs":6000,"downloads":29425,"num_ratings":2,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","changelog"],"tags":{"1.0":{"tag":"1.0","author":"nielslange","date":"2019-02-20 11:14:52"},"1.1":{"tag":"1.1","author":"nielslange","date":"2019-02-20 11:15:21"},"1.2":{"tag":"1.2","author":"nielslange","date":"2019-04-05 09:41:00"},"1.3":{"tag":"1.3","author":"nielslange","date":"2019-12-26 03:37:49"},"1.4":{"tag":"1.4","author":"nielslange","date":"2020-05-10 11:28:16"},"1.5":{"tag":"1.5","author":"nielslange","date":"2020-05-10 11:43:03"},"1.6":{"tag":"1.6","author":"nielslange","date":"2021-01-08 08:55:52"},"1.7":{"tag":"1.7","author":"nielslange","date":"2021-05-01 12:43:47"},"1.8":{"tag":"1.8","author":"nielslange","date":"2021-12-31 10:48:41"},"1.9":{"tag":"1.9","author":"nielslange","date":"2022-06-09 18:14:13"},"2.0":{"tag":"2.0","author":"nielslange","date":"2022-12-03 05:12:18"},"2.1":{"tag":"2.1","author":"nielslange","date":"2023-03-11 06:07:24"},"2.2":{"tag":"2.2","author":"nielslange","date":"2023-10-15 02:57:34"},"2.3":{"tag":"2.3","author":"nielslange","date":"2024-10-19 05:09:06"},"2.4":{"tag":"2.4","author":"nielslange","date":"2024-12-31 06:23:22"}},"upgrade_notice":[],"ratings":{"1":0,"2":0,"3":0,"4":0,"5":2},"assets_icons":{"icon-128x128.jpg":{"filename":"icon-128x128.jpg","revision":1561177,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.jpg":{"filename":"icon-256x256.jpg","revision":1561177,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":{"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":1561177,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0","1.1","1.2","1.3","1.4","1.5","1.6","1.7","1.8","1.9","2.0","2.1","2.2","2.3","2.4"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[129131,23853,600],"plugin_category":[],"plugin_contributors":[83824],"plugin_business_model":[],"class_list":["post-52671","plugin","type-plugin","status-publish","hentry","plugin_tags-endpoints","plugin_tags-rest-api","plugin_tags-security","plugin_contributors-nielslange","plugin_committers-nielslange"],"banners":{"banner":"https:\/\/ps.w.org\/smntcs-disable-rest-api-user-endpoints\/assets\/banner-772x250.jpg?rev=1561177","banner_2x":false,"banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/smntcs-disable-rest-api-user-endpoints\/assets\/icon-128x128.jpg?rev=1561177","icon_2x":"https:\/\/ps.w.org\/smntcs-disable-rest-api-user-endpoints\/assets\/icon-256x256.jpg?rev=1561177","generated":false},"screenshots":[],"raw_content":"\n

With WordPress 4.7 the REST API is part of the core. At the moment everyone has read access to the REST API. As a result of that a potential intruder can retrieve a list of all user slugs via \/wp-json\/wp\/v2\/users<\/code>. This plugin disables the REST API user endpoints to obscure the user slugs.<\/p>\n\n

Contribute<\/h3>\n\n

Contributions are more than welcome. Simply head over to Github<\/a> and open an issue or a pull request.<\/p>\n\n\n

    \n
  1. Upload smntcs-disable-rest-api-user-endpoints<\/code> to the \/wp-content\/plugins\/<\/code> directory.<\/li>\n
  2. Activate the plugin through the Plugins<\/code> menu in WordPress.<\/li>\n<\/ol>\n\n\n

    2.4 (2024.12.31)<\/h4>\n\n