REST API Route Tester Security & Risk Analysis

wordpress.org/plugins/rest-api-route-tester

A tool to test WordPress REST API routes with different user roles and authentication methods. Provides a Postman-like interface inside WordPress to d …

30 active installs v1.1.0 PHP 7.2+ WP 5.0+ Updated Oct 16, 2025
apideveloper-toolsrest-apitesting
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is REST API Route Tester Safe to Use in 2026?

Generally Safe

Score 100/100

REST API Route Tester has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago
Risk Assessment

The "rest-api-route-tester" plugin v1.1.0 demonstrates a strong security posture based on the provided static analysis. The plugin features a limited attack surface consisting solely of four AJAX handlers, all of which are appropriately protected with nonce and capability checks. The absence of direct REST API routes, shortcodes, and cron events further minimizes potential entry points. Crucially, the code shows excellent security practices, with no dangerous functions, file operations, or external HTTP requests. All SQL queries utilize prepared statements, and all output is properly escaped, indicating a conscientious development approach. The taint analysis results are also highly positive, with no flows exhibiting unsanitized paths, suggesting robust input validation and sanitization.

Vulnerabilities
None known

REST API Route Tester Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

REST API Route Tester Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
5 escaped
Nonce Checks
4
Capability Checks
2
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

100% escaped5 total outputs
Attack Surface

REST API Route Tester Attack Surface

Entry Points4
Unprotected0

AJAX Handlers 4

authwp_ajax_wprrt_get_routesrest-api-route-tester.php:23
authwp_ajax_wprrt_test_routerest-api-route-tester.php:24
authwp_ajax_wprrt_get_user_rolesrest-api-route-tester.php:25
authwp_ajax_wprrt_get_route_examplesrest-api-route-tester.php:26
WordPress Hooks 2
actionadmin_menurest-api-route-tester.php:21
actionadmin_enqueue_scriptsrest-api-route-tester.php:22
Maintenance & Trust

REST API Route Tester Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedOct 16, 2025
PHP min version7.2
Downloads625

Community Trust

Rating0/100
Number of ratings0
Active installs30
Developer Profile

REST API Route Tester Developer Profile

Nowshad Jawad

1 plugin · 30 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect REST API Route Tester

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/rest-api-route-tester/assets/style.css/wp-content/plugins/rest-api-route-tester/assets/app.js
Script Paths
/wp-content/plugins/rest-api-route-tester/assets/app.js
Version Parameters
rest-api-route-tester/style.css?ver=rest-api-route-tester/app.js?ver=

HTML / DOM Fingerprints

JS Globals
wprrt_vars
REST Endpoints
/wp-json/rest-api-route-tester/v1/routes/wp-json/rest-api-route-tester/v1/test-route/wp-json/rest-api-route-tester/v1/user-roles/wp-json/rest-api-route-tester/v1/route-examples
FAQ

Frequently Asked Questions about REST API Route Tester