Disabling the JSON REST API in WordPress

[Mostafa044]

We recently received a question from a visitor that we hear quite often here: “How do I disable the REST API on my WordPress site?” And honestly, that’s a valid concern.

When WordPress version 4.4 was released with the JSON REST API, it opened up a world of possibilities for developers. However, many website owners find it unnecessary and worry about the potential vulnerabilities it introduces.

In this article, we will show you how to easily disable the JSON REST API in WordPress.

There is no denying that the API has many benefits for WordPress developers. The API makes it super easy to retrieve data via GET requests, which is useful for building applications with WordPress.

However, this could potentially open your website to a new front of DDoS attacks. It can also be resource intensive and slow down your WordPress website .

Disabling JSON REST API is similar to disabling XML-RPC , list of new zealand cell phone number which many website administrators disable on their WordPress sites to be on the safe side.

We'll show you two methods to easily disable the JSON REST API in WordPress. Just use the links below to jump to the method you want.

WPCode makes it safe and easy to add custom code in WordPress without editing your theme's functions.php file . This way, there's no risk of making a mistake and breaking your website.

It also includes a built-in code library with verified code snippets for popular features like disabling the REST API, disabling XML-RPC, and more, so you don't have to install a whole bunch of one-time-use plugins.

To get started, you'll need to install and activate the free WPCode plugin . For step-by-step instructions, check out our guide on how to install a WordPress plugin .