Turn Off REST API
Turn Off REST API is a lightweight WordPress security plugin that disables the WordPress REST API for visitors who are not logged in. Anonymous requests to your /wp-json endpoints receive an authentication error instead of your site data, while logged in users, your theme, and your plugins keep working normally. By default WordPress exposes a large amount of information through the REST API, including your list of user accounts and usernames, published content, and details about your site. For most sites that open, unauthenticated access is unnecessary and only widens the attack surface for user enumeration and content scraping. Turn Off REST API closes the WordPress REST API to the public in one click, then gives you a clear settings screen to reopen only the specific REST API routes you actually need. Why turn off the WordPress REST API? Stop anonymous user enumeration through /wp-json/wp/v2/users. Reduce your attack surface against REST API based exploits and bots. Keep your content and site data from being scraped through the public API. Stay in control with a per route allow list instead of an all or nothing switch. What it does Returns an authentication error for unauthenticated REST API requests. Optionally removes the REST API discovery links and headers from your page source. Lets you build an allow list of routes that should stay public (for example a contact form or a specific integration). Adds a Site Health check so the restriction is clearly explained and never mistaken for a fault. Keeps the admin area, the block editor, and logged in functionality fully working. Built for control, not breakage Some security plugins disable the REST API completely and break the block editor or third party integrations in the process. Turn Off REST API only blocks unauthenticated access, and the per route allow list means you can whitelist exactly the endpoints a service needs without opening the whole API back up. Developer friendly The access decision runs through the tora_grant_rest_api filter, so developers can extend or override the logic for custom roles, application passwords, or trusted requests.
Top keywords
- api15×4.30%
- rest13×3.72%
- rest api13×3.72%
- wordpress5×1.43%
- list4×1.15%
- off4×1.15%
- site4×1.15%
- through4×1.15%
- turn4×1.15%
- turn off4×1.15%
- access3×0.86%
- allow3×0.86%
LightStart – Maintenance Mode, Coming Soon and Landing Page Builder
Add a maintenance page to your blog that lets visitors know your blog is down for maintenance, add a coming soon page for a new website or create a landing page for an existing site. User with admin rights gets full access to the blog including the front end. Activate the plugin and your blog is in maintenance-mode, works and only registered users with enough rights can see the front end. You can use a date with a countdown timer for visitor information or set a value and unit for information. Also works with WordPress Multisite installs (each blog from the network has its own maintenance settings). Features Fully customizable (change colors, texts and backgrounds). Subscription form (export emails to .csv file). Countdown timer (remaining time). Contact form (receive emails from visitors). Coming soon page; Landing page templates; WordPress multisite; Responsive design; Social media icons; Works with any WordPress theme; SEO options; Exclude URLs from maintenance; Bot functionality to collect the emails in a friendly and efficient way; GDPR Ready; Bugs, technical hints or contribute Please give us feedback, contribute and file technical bugs on GitHub Repo. Credits Developed by Themeisle What’s Next If you like this plugin, then consider checking out our other projects: Optimole – Optimole is your all-in-one image optimization solution for WordPress & beyond. WPShout – In-Depth WordPress Tutorials for Developers Revive Social – Revive Old Posts helps you keep your content alive and in front the audiences that matter. CodeinWP – CodeinWP stands for all-things-WordPress. From web design to freelancing and from development to business, your questions are covered. DomainWheel – Free Short Website name generator, with the help of AI, for instant ideas. Check-out our blog to learn from our WordPress Reviews and see other WordPress plugins.
Top keywords
- wordpress7×2.43%
- blog6×2.08%
- page5×1.74%
- maintenance4×1.39%
- emails3×1.04%
