SMNTCS Disable REST API User Endpoints

plugin banner

Disable the REST API user endpoints due to obscure user slugs

Author:Niels Lange (profile at
WordPress version required:5.5
WordPress version tested:6.4.4
Plugin version:2.2
Added to WordPress repository:24-12-2016
Last updated:15-10-2023
Rating, %:100
Rated by:2
Plugin URI:
Total downloads:15 971
Active installs:3 000+
plugin download
Click to start download

With WordPress 4.7 the REST API is part of the core. At the moment everyone has read access to the REST API. As a result of that a potential intruder can retrieve a list of all user slugs via /wp-json/wp/v2/users. This plugin disables the REST API user endpoints to obscure the user slugs.


Contributions are more than welcome. Simply head over to Github and open an issue or a pull request.