Articles in this section

How to install Let's Encrypt SSL certificate for a domain in Plesk?
Unable to set up Multi-Factor Authentication (MFA) under customer or reseller account in Plesk: QR code is not displayed
How to connect cPanel/Plesk to MCP in WebPros Dashboard?
Vulnerability: Privilege Escalation via Phusion Passenger's Watchdog API
Cannot open the WP-Toolkit Plugin in WordPress: Plugin Access token not found
Import button in "Transfer of DNS records" extension does not work as expected
Unable to create or migrate a domain in Plesk: System error 2: No such file or directory webstatmng: Unable to copy the file /etc/awstats/awstats.model.conf
Plesk Slave DNS Manager fails to propagate zones: 'site-name' element not expected error
Notifications from Monitoring in Plesk: The bandwidth utilization status is critical!
Vulnerability CVE-2026-56843: Cleartext FTP Password Exposure in Plesk's XML API
See more

How to block user enumeration via WordPress REST API endpoints?

Vincent Lauton

Updated October 02, 2025 21:03

Plesk for Windows kb: how-to Plesk for Linux

Applicable to:

Plesk for Linux
Plesk for Windows

Question

How to block user enumeration via WordPress REST API endpoints?

Answer

There is an open-source, actively maintained WordPress plugin that specifically blocks User Enumeration:

Stop User Enumeration -- wordpress.org

There is also a feature request on our UserVoice page:

Ability to toggle WordPress REST API endpoints - UserVoice

Comments

0 comments

Please sign in to leave a comment.