As of April 2026, WP REST API Security is a WordPress api plugin with 10 active installations and a 4/5 rating from 1 reviews. It has been downloaded 1.2K+ times in total. Requires WordPress 4.9+ and PHP 7.0+. Available on WordPress.org since 2019. Last updated 6 years ago — may have compatibility concerns. Top alternative: WP Consent API.
4/51 reviews
10active installs
1.2K+total downloads
7 yearssince 2019
Overview
The REST API is essential for any modern web framework, but with it comes a huge attack surface. WP REST API Security reduces the attack surface by disabling all the REST API endpoints by default, allowing you to enable only those actually needed. Those that are enabled require authentication by default, allowing you to choose which to make public.
N.B. If you are using the new Block Editor you must keep nearly all the endpoints enabled for it to work, but none need be public.
Ratings & Reviews
41 reviews
5 ★
0
4 ★
1
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 4.9+ requiredTested up to 5.1.22 |
| PHP | 7.0+ required |
Top Alternatives to WP REST API Security
Frequently Asked Questions
Changelog
1.1.2
- Fix array error.
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.