Support » Plugin: Coming Soon Page, Under Construction & Maintenance Mode by SeedProd » WP 4.7 REST API still accessible while in maintenance mode

  • Resolved James Collins

    (@jamescollins)


    Hi John, thanks for the great plugin!

    I recently updated to WordPress 4.7, and I was hoping that a site in maintenance mode wouldn’t have its content publicly accessible via the new REST API.

    To replicate this, update to 4.7, then put your site into maintenance mode, then visit a URL such as:

    http://example.com/wp-json/
    or
    http://example.com/wp-json/wp/v2/pages

    If a site is in maintenance mode, then I think that unauthenticated REST API requests shouldn’t be allowed. Otherwise post/page/comment content is all publicly accessible via the API even though the site is in maintenance mode or coming soon mode.

    Thanks very much,

    James

Viewing 6 replies - 1 through 6 (of 6 total)
Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘WP 4.7 REST API still accessible while in maintenance mode’ is closed to new replies.