Disable REST API
At risk: no release in 38 months (last release 14 Sep 2023).
Capped at 59 while a Critical signal is open.
| Ownership | 100 |
|---|---|
| Maintenance | 0 |
| Security | 100 |
| Support | 70 |
| Reputation | 70 |
Active signals
Facts we detected, with links to the source.
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| dmchale | 3 Oct 2014 to 14 Sep 2023, 17 commits |
|---|
1 committer recorded. No ownership changes recorded since 3 Nov 2026.
Maintenance
- Last release
- 3 years ago
- Releases, 24 months
- 0
- Tested up to
- 6.3 vs 7.1
- Requires PHP
- 5.6 supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 0 |
| Q4 2024 | 0 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 14 Sep 2023. Tested up to 6.3, 8 major versions behind WordPress 7.1.
Support
0% of 1 support threads resolved in the last 2 months.
Security record
No published vulnerabilities on record for this plugin.
Source: Wordfence Intelligence.
Reputation
Average rating stayed at 5.0 between Q4 2023 and Q3 2024.
| 5 star | 36 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 0 |
| 1 star | 1 |
- Broke my site - but seems good idea · 1 star · 27 Dec 2022
Momentum
80,000+ active installs. History builds with each weekly snapshot.
| 4 May 2026 | 484 |
|---|---|
| 11 May 2026 | 1,077 |
| 18 May 2026 | 1,241 |
| 25 May 2026 | 1,067 |
| 1 Jun 2026 | 1,076 |
| 8 Jun 2026 | 1,337 |
| 15 Jun 2026 | 990 |
| 22 Jun 2026 | 936 |
| 29 Jun 2026 | 1,004 |
| 6 Jul 2026 | 1,198 |
| 13 Jul 2026 | 1,201 |
| 20 Jul 2026 | 1,337 |
| 27 Jul 2026 | 1,146 |
| 3 Aug 2026 | 1,205 |
| 10 Aug 2026 | 1,345 |
| 17 Aug 2026 | 1,331 |
| 24 Aug 2026 | 1,301 |
| 31 Aug 2026 | 1,304 |
| 7 Sep 2026 | 1,241 |
| 14 Sep 2026 | 1,470 |
| 21 Sep 2026 | 1,466 |
| 28 Sep 2026 | 1,551 |
| 5 Oct 2026 | 1,805 |
| 12 Oct 2026 | 1,387 |
| 19 Oct 2026 | 2,185 |
| 26 Oct 2026 | 2,288 |
| 2 Nov 2026 | 309 |
Weekly downloads over the last 4 weeks are 21% above the 27-week average.
Healthier alternatives
Same category, higher Canary Score. Never sponsored.
Facts
| Version | 1.8 |
|---|---|
| Author | Dave McHale |
| Added | 3 Oct 2014 |
| Last updated | 14 Sep 2023 |
| Active installs | 80,000+ |
| Requires WordPress | 4.9 |
| Tested up to | 6.3.14 |
| Requires PHP | 5.6 |
| Category | Security & Privacy > Security Scanning & Malware Protection |
| Tags | api, JSON, rest, admin, rest-api |
Other plugins by this author: 404 Widget for Google, Fake Login Area, Contact Form 7: Support Deprecated Settings, DisableMU, Echo Chamber Comments
Questions
Is Disable REST API still maintained?
Disable REST API was last updated on 14 Sep 2023. Its Canary status is At risk.
Is Disable REST API safe?
Disable REST API has no open unpatched vulnerabilities on record. 0 vulnerabilities were published in the last 24 months. Its Canary status is At risk.
Who owns Disable REST API?
The wordpress.org author is Dave McHale. Recent committers: dmchale, plugin-master. We have recorded no ownership change.
What can I use instead of Disable REST API?
Plugins in the same category with a higher Canary Score: IP Location Block, Wordfence Security - Firewall, Malware Scan, and Login Security, Sucuri Security - Auditing, Malware Scanner and Security Hardening, WP Content Copy Protection & No Right Click, NinjaFirewall (WP Edition) - Advanced Security Plugin and Firewall.