92
Disable WP REST API
Simple security that might accidentally break your contact forms.
HealthyGrowing
92/100
This lightweight tool works well but can break plugins like Contact Form 7.
Active installs
~35,000
our estimate · wp.org shows 30k+
Rating
4.8★
36 ratings
Trend · vs a year ago
+71%
Growing fast
121 → 207 installs/day
Downloads over time
real new installs per day · release spikes shown separately from the trend2025-04-302025-08-082025-11-162026-02-232026-06-03
organicrelease spikerelease tailorganic trend · 14d rolling median
Growing fast · +71% in the last year
121/day a year ago→207/day today
Reviews
what people actually sayDisable WP REST API is a well-regarded, lightweight security plugin that reliably blocks unauthenticated REST API access, though it can break other plugins — notably Contact Form 7 — that depend on the REST API.
What people like
- +Simple to use — install, activate, and it works with no configuration needed×4
- +Lightweight with no noticeable performance impact×2
- +Addresses a genuine security and privacy concern by blocking unauthenticated REST API access×3
- +Compatible with current versions of WordPress
Common complaints
- −Can break other plugins that rely on the REST API, such as Contact Form 7 (forms stop submitting after activation)×2
- −May be too blunt a solution for sites with complex plugin setups, where a more targeted block (e.g. via .htaccess) would be preferable
Review trustMostly organic
- 4.82★Verified rating — holds steady vs the raw 4.80★
- 6%One-shot reviewers — most reviewers are active community members
- past spikeReview timing — up to 25% of all reviews landed in a single month
Reviews per month · 5★ vs lower
2023-08-192025-01-102026-06-04
5★ reviews1–4★ reviews
All-time ratings · 36 total
Latest reviews · 36 analyzed
- 2025-09-08★★★★★good jobpftsoi
- 2024-11-19★★★★★Very simple and effectiveterrymason
- 2024-05-06★★★★★I like it!wildstar2022
- 2023-07-24★★★★★Blocks Contact Form 7 forms sendingHendrik57
- 2023-03-29★★★★★Good Stuff – but make many other things more complicatemetaeditor
- 2022-11-06★★★★★Super simple plugintinaponting
- 2022-09-26★★★★★Works best7 Mysteries
- 2022-07-28★★★★★dead simple and efficient, but be awareEduard Doloc
- 2022-07-07★★★★★Goodproektion
- 2022-02-01★★★★★You Deserve it :)mahfoof
Releases
recent versions from WordPress.org SVNFor developers & the curious
the raw signals behind the grade — none of this is on the friendly summary aboveDownload signals
Baselines are computed on organic days only — release spikes and their tails are excluded, so they're not inflated by the auto-update wave.
211
Baseline · median of last 7 organic days
227
Prior 7-day baseline
150
Floor · 25th percentile over 14 days
463
Mean release-day peak (30d)
211
Latest day · 2026-06-03(organic)
-7.0%
Week-over-week organic trend
Review signals
Concentration and drive-by metrics drive the review-burst and fake-review flags. 30–40% solo reviewers is normal; we only flag the extremes.
25%
Max month share · biggest single 30-day window
2.78
Distribution CV · <0.6 even, >1.5 bursty
94%
5★ share in analyzed sample
6%
Solo reviewers · only this one wp.org activity
—
Volume velocity · last 6mo vs prior 6mo
4.83 → 4.82★
Sample avg · raw → solo-filtered