Knowledge Base

How to block user enumeration via WordPress REST API endpoints?

Question

How to block user enumeration via WordPress REST API endpoints?

Answer

There is an open-source, actively maintained WordPress plugin that specifically blocks User Enumeration:

Stop User Enumeration -- wordpress.org

There is also a feature request on our UserVoice page:

Ability to toggle WordPress REST API endpoints - UserVoice

Related Posts

REST – All You Have To Know About Representational State Transfer

Four expert panelists tackle the future of WordPress at #WCBTN

6 essentials on Docker containers

Knowledge Base

How to manage WordPress instances (WordPress installation, theme management) over API

Can Plesk resellers and customers use REST API?

WordPress websites on a Plesk server show “404 Not Found” when PHP-FPM by Nginx and Proxy Mode are used

WordPress Site Health error on Plesk server: The REST API encountered en error / Your site could not complete a loopback request.

Hosting Wiki