• Plugin Version: Version 8.8.5
    tab=hardening

    Stop user enumeration: enabled
    Disable REST API: enabled
    –> save

    but i can still connect to e.g.:
    https://domain.com/wp-json/wp/v2/users/
    and all other endpoints
    (via a completely different IP-Address, NOT in the White Access List)

    Traffic Inspector says:
    -json/wp/v2/users/
    GET “REST API” HTTP 200 OK

    it is not working, what can be wrong here?

    I then tried another plugin (for controlling rest-access) and it worked as expected …

  • The topic ‘REST API blocking not working’ is closed to new replies.