REST API Explorer Security & Risk Analysis

wordpress.org/plugins/rest-api-explorer

Explore and test the WordPress REST API right in the WordPress admin!

50 active installs v1.0.3 PHP 7.0+ WP 6.0+ Updated Jul 11, 2025
apirest
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is REST API Explorer Safe to Use in 2026?

Generally Safe

Score 100/100

REST API Explorer has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 10mo ago
Risk Assessment

The "rest-api-explorer" plugin version 1.0.3 exhibits an exceptionally strong security posture based on the provided static analysis. The complete absence of AJAX handlers, REST API routes, shortcodes, and cron events, combined with zero identified dangerous functions, raw SQL queries, unescaped output, file operations, or external HTTP requests, indicates a very lean and well-secured codebase. Taint analysis revealing zero flows, especially those with unsanitized paths, further reinforces this assessment. The plugin also demonstrates good practices by including a capability check and ensuring all SQL queries utilize prepared statements.

Vulnerabilities
None known

REST API Explorer Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

REST API Explorer Release Timeline

v1.0.3Current
v1.0.2
v1.0.1
Code Analysis
Analyzed Apr 16, 2026

REST API Explorer Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

REST API Explorer Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
actionadmin_menurest-api-explorer.php:29
actionadmin_enqueue_scriptsrest-api-explorer.php:30
Maintenance & Trust

REST API Explorer Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedJul 11, 2025
PHP min version7.0
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs50
Developer Profile

REST API Explorer Developer Profile

BerryPress

11 plugins · 11K total installs

93
trust score
Avg Security Score
99/100
Avg Patch Time
19 days
View full developer profile
Detection Fingerprints

How We Detect REST API Explorer

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/rest-api-explorer/assets/css/explorer.css/wp-content/plugins/rest-api-explorer/assets/js/explorer.js
Script Paths
/wp-content/plugins/rest-api-explorer/assets/js/explorer.js
Version Parameters
rest-api-explorer/assets/css/explorer.css?ver=rest-api-explorer/assets/js/explorer.js?ver=

HTML / DOM Fingerprints

CSS Classes
rest-api-explorer
JS Globals
phplugins_rest_api_configphplugins_rest_api_data
FAQ

Frequently Asked Questions about REST API Explorer