Omitting the status parameter now defaults to draft instead of publish, so a post cannot be published without explicitly requesting it.<\/p>","1.0.2":"
Hardens the publish permission check so editing an already-published post requires the publish_posts capability even when the status is unchanged.<\/p>","1.0.1":"
Hardens the publish permission check so editing an existing post cannot be used to publish without the publish_posts capability.<\/p>","1.0.0":"
Initial release.<\/p>"},"ratings":[],"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.3"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[569,7143,174174,23853,186],"plugin_category":[55],"plugin_contributors":[268509],"plugin_business_model":[],"class_list":["post-329087","plugin","type-plugin","status-publish","hentry","plugin_tags-automation","plugin_tags-publishing","plugin_tags-rankmath","plugin_tags-rest-api","plugin_tags-seo","plugin_category-seo-and-marketing","plugin_contributors-gymgrowplugin","plugin_committers-gymgrowplugin"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/gymgrow-connect.svg","icon_2x":false,"generated":true},"screenshots":[],"raw_content":"\n
GymGrow Connect adds a small set of secure REST API endpoints under the It replaces ad-hoc A backward-compatible alias Requests are authenticated with WordPress's own user authentication \u2014 use an Application Password (Basic Auth) for a user who can publish posts. Permissions are enforced per route with capability checks ( This plugin does not call any external services and stores no personal data.<\/p>\n\n\n No. If RankMath is active the SEO fields take effect immediately. If not, the meta is still stored under the RankMath meta keys and becomes live once RankMath is installed.<\/p><\/dd>\n Every route has a capability-based No. The plugin only receives requests; it does not phone home or contact third-party services.<\/p><\/dd>\n\n<\/dl>\n\n\ngymgrow\/v1<\/code> namespace so an external system (for example, an AI content pipeline) can:<\/p>\n\n\n
functions.php<\/code> snippets with a versioned, capability-checked plugin.<\/p>\n\nEndpoints<\/h4>\n\n
\n
POST \/wp-json\/gymgrow\/v1\/article<\/code> \u2014 publish\/update an article (also sets SEO and featured image).<\/li>\nPOST \/wp-json\/gymgrow\/v1\/media<\/code> \u2014 upload an image.<\/li>\nPOST \/wp-json\/gymgrow\/v1\/seo\/{id}<\/code> \u2014 update RankMath SEO fields for a post.<\/li>\n<\/ul>\n\nPOST \/wp-json\/custom\/v1\/rankmath\/{id}<\/code> is also registered for pipelines that used the legacy route.<\/p>\n\nAuthentication<\/h4>\n\n
publish_posts<\/code>, upload_files<\/code>, edit_post<\/code>). You may optionally enable a second-factor shared secret (X-GymGrow-Key<\/code> header) from the settings screen.<\/p>\n\n\n
gymgrow-connect<\/code> folder to \/wp-content\/plugins\/<\/code>, or install the ZIP via Plugins \u2192 Add New \u2192 Upload Plugin.<\/li>\n\n
Does it require RankMath?<\/h3><\/dt>\n
How are the endpoints secured?<\/h3><\/dt>\n
permission_callback<\/code>. Publishing requires publish_posts<\/code>, uploads require upload_files<\/code>, and SEO updates require edit_post<\/code> on the target post. You can additionally require a matching X-GymGrow-Key<\/code> header.<\/p><\/dd>\nDoes it send data anywhere?<\/h3><\/dt>\n
1.0.3<\/h4>\n\n
\n
status<\/code> parameter now creates or updates a draft instead of publishing. Publishing requires explicitly passing status=publish<\/code>, which remains gated by the publish_posts<\/code> capability.<\/li>\n<\/ul>\n\n1.0.2<\/h4>\n\n
\n
publish_posts<\/code> capability even when the request does not change the status.<\/li>\n<\/ul>\n\n1.0.1<\/h4>\n\n
\n
publish_posts<\/code> capability when an update changes a post to a published, private, or scheduled (future) status, not just edit_post<\/code>.<\/li>\n<\/ul>\n\n1.0.0<\/h4>\n\n
\n