Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Birim REST Lock version 1.0.0 as active, updated 3d ago and tested up to WordPress 7.1.
Overview
About this plugin
WordPress exposes a public REST API at /wp-json/. Anyone can list your users, your installed plugins’ endpoints and your content. Birim REST Lock closes it without breaking your site.
Allowlist mode (default): block every route except the ones you list.
Blocklist mode: allow every route except the ones you list.
Wildcards: /wp/v2/posts* covers /wp/v2/posts and /wp/v2/posts/123.
Role rules: apply the same rules to logged-in roles you choose, such as subscribers or customers. Administrators are never blocked.
Hide what you run: block the route index and namespace listings, and remove REST links from page HTML, the Link header and RSD.
Safe defaults: Contact Form 7, WooCommerce block checkout, oEmbed and Jetpack routes are allowed out of the box. CORS preflight ( OPTIONS ) requests pass through, so token logins keep working.
One-click import from Disable REST API: moves your logged-out allowlist and managed roles across.
Lightweight: one file, works on PHP 7.4 and up, no tracking, no external requests, no ads.
For developers
birim_rest_lock_blocked filter: ( bool $blocked, string $route, WP_REST_Request $request ) to override the decision.
birim_rest_lock_message filter: change the error message.
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
disable rest api
rest api
user enumeration
json
security
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 6.0 · PHP 7.4
Update activity30 Oct 20263d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
No tracked version or compatibility changes have been recorded by WP PlugIndex yet.
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
