Title: SMNTCS Disable REST API User Endpoints Author: Niels Lange Published: December 24, 2016 Last modified: December 31, 2024 --- Search plugins ![](https://ps.w.org/smntcs-disable-rest-api-user-endpoints/assets/banner-772x250. jpg?rev=1561177) This plugin **hasn’t been tested with the latest 3 major releases of WordPress**. It may no longer be maintained or supported and may have compatibility issues when used with more recent versions of WordPress. ![](https://ps.w.org/smntcs-disable-rest-api-user-endpoints/assets/icon-256x256. jpg?rev=1561177) # SMNTCS Disable REST API User Endpoints By [Niels Lange](https://profiles.wordpress.org/nielslange/) [Download](https://downloads.wordpress.org/plugin/smntcs-disable-rest-api-user-endpoints.2.4.zip) * [Details](https://wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/#description) * [Reviews](https://wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/#reviews) * [Installation](https://wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/#installation) * [Development](https://wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/#developers) [Support](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/) ## Description With WordPress 4.7 the REST API is part of the core. At the moment everyone has read access to the REST API. As a result of that a potential intruder can retrieve a list of all user slugs via `/wp-json/wp/v2/users`. This plugin disables the REST API user endpoints to obscure the user slugs. ### Contribute Contributions are more than welcome. Simply head over to [Github](https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/) and open an issue or a pull request. ## Installation 1. Upload `smntcs-disable-rest-api-user-endpoints` to the `/wp-content/plugins/` directory. 2. Activate the plugin through the `Plugins` menu in WordPress. ## Reviews ![](https://secure.gravatar.com/avatar/bd79398aadc8fb4387de86175fafc311f2dbf3cf170d66b5da3ab70231971dc1? s=60&d=retro&r=g) ### 󠀁[Great plugin](https://wordpress.org/support/topic/great-plugin-30833/)󠁿 [Joe B](https://profiles.wordpress.org/joelogic/) May 10, 2021 1 reply Great plugin, works as it should, a must for any Wordpress site. ![](https://secure.gravatar.com/avatar/a1d21769c6d0ddd960f0b2bacd99e6f2e24a9b623b4c33df1043c404bbc4df7d? s=60&d=retro&r=g) ### 󠀁[Perfect](https://wordpress.org/support/topic/perfect-3937/)󠁿 [philippenantes](https://profiles.wordpress.org/philippenantes/) April 6, 2017 Does what is says, and you really shoud use this on all your sites. I just can’t imagine your woocommerce customers login names being exposed via the REST API. Though the REST API is an amazing feature Kudos on this !!! [ Read all 2 reviews ](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/reviews/) ## Contributors & Developers “SMNTCS Disable REST API User Endpoints” is open source software. The following people have contributed to this plugin. Contributors * [ Niels Lange ](https://profiles.wordpress.org/nielslange/) “SMNTCS Disable REST API User Endpoints” has been translated into 5 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/smntcs-disable-rest-api-user-endpoints/contributors) for their contributions. [Translate “SMNTCS Disable REST API User Endpoints” into your language.](https://translate.wordpress.org/projects/wp-plugins/smntcs-disable-rest-api-user-endpoints) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/smntcs-disable-rest-api-user-endpoints/), check out the [SVN repository](https://plugins.svn.wordpress.org/smntcs-disable-rest-api-user-endpoints/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/smntcs-disable-rest-api-user-endpoints/) by [RSS](https://plugins.trac.wordpress.org/log/smntcs-disable-rest-api-user-endpoints/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 2.4 (2024.12.31) * Test up to WordPress 6.7 #### 2.3 (2024.10.19) * Test up to WordPress 6.6 #### 2.2 (2023.10.15) * Test up to WordPress 6.4 * Convert code to OOP #### 2.1 (2023.03.11) * Test up to WordPress 6.2 #### 2.0 (2022.12.03) * Test up to WordPress 6.1 #### 1.9 (2022.06.09) * Test up to WordPress 6.0 #### 1.8 (2021.12.31) * Test up to WordPress 5.8 #### 1.7 (2021.05.01) * [Add build tools](https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/issues/21) * [Add GitHub Actions](https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/issues/23) * [Test up to WordPress 5.7](https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/issues/25) #### 1.6 (2021.01.08) * Test up to WordPress 5.6 #### 1.5 (2020.05.10) * [Remove load_plugin_textdomain()](https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/issues/7) #### 1.4 (2020.05.10) * [Update plugin header](https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/issues/5) * Test up to WordPress 5.4 #### 1.3 (2019.12.26) * [Add build tools](https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/issues/3) * [Test up to 5.3](https://github.com/nielslange/smntcs-disable-rest-api-user-endpoints/issues/2) #### 1.2 (2019.04.05) * Refactor based on PHPCS and WPCS #### 1.1 (2019.02.20) * Test up to WordPress 5.1 #### 1.0 (2018.03.27) * Initial release ## Meta * Version **2.4** * Last updated **1 year ago** * Active installations **6,000+** * WordPress version ** 5.5 or higher ** * Tested up to **6.7.5** * PHP version ** 5.6 or higher ** * Languages * [Albanian](https://sq.wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/), [Chinese (China)](https://cn.wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/), [Dutch](https://nl.wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/), [English (US)](https://wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/), [German](https://de.wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/), and [German (Switzerland)](https://de-ch.wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/). * [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/smntcs-disable-rest-api-user-endpoints) * Tags * [Endpoints](https://wordpress.org/plugins/tags/endpoints/)[rest-api](https://wordpress.org/plugins/tags/rest-api/) [security](https://wordpress.org/plugins/tags/security/) * [Advanced View](https://wordpress.org/plugins/smntcs-disable-rest-api-user-endpoints/advanced/) ## Ratings 5 out of 5 stars. * [ 2 5-star reviews ](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/reviews/) ## Contributors * [ Niels Lange ](https://profiles.wordpress.org/nielslange/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/smntcs-disable-rest-api-user-endpoints/)