Make managing your WordPress site’s REST routes a breeze with REST Manager for WordPress PRO.

REST Manager for WordPress PRO provides you a simple interface to allow or disallow REST routes. Default routes required by WordPress are left alone, while the most critical routes that should not be publicly available are blocked by default.

You can decide what is available publicly and what isn’t. If you need some routes publicly available because of certain plugins or custom code, you can keep them that way. With REST Manager for WordPress PRO, you are in control.

By default, most WordPress sites show their REST routes via /wp-json/. You can see this by checking <yoursite.com>/wp-json/. While many of the routes don’t allow public access, they still provide viewing of information that might be of interest to attackers in the first steps of a cyber kill chain ( reconnaissance and enumeration ).