[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcks6JYOLVfT0PVf3xQxx2X0vr925gRmcO1u0wBnJxAU":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":23,"download_link":24,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27,"vulnerabilities":28,"developer":29,"crawl_stats":26,"alternatives":34,"analysis":134,"fingerprints":183},"rest-api-route-tester","REST API Route Tester","1.1.0","Nowshad Jawad","https:\u002F\u002Fprofiles.wordpress.org\u002Fjawad0501\u002F","\u003Cp>REST API Route Tester is a powerful tool for WordPress developers and administrators to test and debug REST API endpoints directly from the wp-admin. It provides a user-friendly interface to:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>View all registered REST API routes, grouped by plugin\u003C\u002Fli>\n\u003Cli>Test routes with HTTP methods (GET, POST, PUT, DELETE)\u003C\u002Fli>\n\u003Cli>Switch between different user roles to test permissions\u003C\u002Fli>\n\u003Cli>Send custom headers and body data (JSON)\u003C\u002Fli>\n\u003Cli>View detailed responses including status codes and response time\u003C\u002Fli>\n\u003Cli>Create multiple request tabs and persist state between sessions\u003C\u002Fli>\n\u003Cli>Auto-suggest routes with a searchable dropdown; auto-select primary method\u003C\u002Fli>\n\u003Cli>Generate example payloads based on route schema (via OPTIONS discovery)\u003C\u002Fli>\n\u003C\u002Ful>\n","A tool to test WordPress REST API routes with different user roles and authentication methods. Provides a Postman-like interface inside WordPress to d …",30,625,0,"2025-10-16T10:34:00.000Z","6.8.5","5.0","7.2",[19,20,21,22],"api","developer-tools","rest-api","testing","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Frest-api-route-tester\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frest-api-route-tester.1.1.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":30,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":25,"avg_patch_time_days":11,"trust_score":32,"computed_at":33},"jawad0501",1,94,"2026-04-04T19:15:51.164Z",[35,56,75,94,115],{"slug":36,"name":37,"version":38,"author":39,"author_profile":40,"description":41,"short_description":42,"active_installs":43,"downloaded":44,"rating":13,"num_ratings":13,"last_updated":45,"tested_up_to":46,"requires_at_least":47,"requires_php":48,"tags":49,"homepage":52,"download_link":53,"security_score":54,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":55},"rest-wp","REST WP","1.0.0","Rajin Sharwar","https:\u002F\u002Fprofiles.wordpress.org\u002Frajinsharwar\u002F","\u003Cp>Say goodbye to juggling multiple tools – REST WP allows you to test and utilize APIs with ease, all from within your WordPress dashboard! Effortlessly test and utilize APIs directly from your WordPress dashboard with REST WP – the ultimate plugin for streamlined API management.\u003C\u002Fp>\n\u003Cp>REST WP allows users to send API calls to an endpoint directly from the WordPress dashboard. It provides a simple and user-friendly interface for making API requests, and allows users to choose from a variety of request methods (GET, POST, PUT, DELETE) as well as customize the request with headers and a body.\u003C\u002Fp>\n\u003Ch3>Functions\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Send API requests to any endpoint(External or Internal) from within your WordPress dashboard.\u003C\u002Fli>\n\u003Cli>Choose from a variety of request methods (GET, POST, PUT, DELETE) to meet your specific needs.\u003C\u002Fli>\n\u003Cli>Customize your request with headers and a body for more precise API calls.\u003C\u002Fli>\n\u003Cli>View real-time response data including response code, latency, and full response content to get a better understanding of your API’s performance and functionality.\u003C\u002Fli>\n\u003Cli>Streamline your workflow by eliminating the need to switch between multiple tools.\u003C\u002Fli>\n\u003Cli>User-friendly interface makes it easy for both developers and non-developers to use.\u003C\u002Fli>\n\u003Cli>Secure and reliable use of the WordPress HTTP API for all HTTP requests.\u003C\u002Fli>\n\u003Cli>Easily add additional headers to your request with the click of a button.\u003C\u002Fli>\n\u003Cli>Works with any API that allows for HTTP requests.\u003C\u002Fli>\n\u003Cli>Compact and lightweight plugin that won’t slow down your website.\u003C\u002Fli>\n\u003Cli>Compatible with all major WordPress themes and plugins.\u003C\u002Fli>\n\u003Cli>Built with developers in mind – easy to extend and customize.\u003C\u002Fli>\n\u003Cli>Frequently updated with new features and improvements.\u003C\u002Fli>\n\u003C\u002Ful>\n","Say goodbye to juggling multiple tools - REST WP allows you to test and utilize APIs with ease, all from within your WordPress dashboard! Effortlessly …",10,933,"2023-01-02T15:04:00.000Z","6.1.10","3.9","5.6",[50,21,51],"api-testing","wp-rest-api","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Frest-wp.1.0.0.zip",85,"2026-03-15T14:54:45.397Z",{"slug":57,"name":58,"version":59,"author":60,"author_profile":61,"description":62,"short_description":63,"active_installs":13,"downloaded":64,"rating":13,"num_ratings":13,"last_updated":52,"tested_up_to":65,"requires_at_least":66,"requires_php":67,"tags":68,"homepage":72,"download_link":73,"security_score":25,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":74},"mksddn-collection-for-postman","MksDdn Collection for Postman","2.1.0","Max","https:\u002F\u002Fprofiles.wordpress.org\u002Fmksddn\u002F","\u003Cp>MksDdn Collection for Postman helps developers quickly generate a Postman Collection (v2.1.0) or OpenAPI 3.0 documentation for WordPress REST API endpoints. The plugin automatically discovers and includes standard WordPress entities, custom post types, options pages, and individual pages. Generated collections include pre-configured requests with sample data and can be downloaded as JSON files for import into Postman. OpenAPI spec can be used with Swagger UI, Redoc, or frontend code generators.\u003C\u002Fp>\n\u003Cp>The plugin provides comprehensive API testing capabilities with automatic generation of test data for form submissions, support for file uploads via multipart\u002Fform-data, and seamless integration with Advanced Custom Fields (ACF). Special handling is included for the mksddn-forms-handler plugin when active.\u003C\u002Fp>\n\u003Cp>Features:\u003Cbr \u002F>\n– Basic REST endpoints: pages, posts, categories, tags, taxonomies, comments, users, settings\u003Cbr \u002F>\n– WooCommerce REST API (wc\u002Fv3): products, product categories, orders with full CRUD when WooCommerce is active\u003Cbr \u002F>\n– Search functionality: Posts, Pages, and All content types with customizable queries\u003Cbr \u002F>\n– Custom Post Types with full CRUD operations (List, Get by Slug\u002FID, Create, Update, Delete)\u003Cbr \u002F>\n– ACF\u002FSCF fields: auto-included for all post types when ACF or Smart Custom Fields plugin is active\u003Cbr \u002F>\n– Special handling for Forms (mksddn-forms-handler integration)\u003Cbr \u002F>\n– Options endpoints: \u003Ccode>\u002Fwp-json\u002Fcustom\u002Fv1\u002Foptions\u002F...\u003C\u002Fcode>\u003Cbr \u002F>\n– Individual pages by slug with ACF field support\u003Cbr \u002F>\n– Automatic test data generation for form submissions\u003Cbr \u002F>\n– Support for multipart\u002Fform-data for file uploads\u003Cbr \u002F>\n– Yoast SEO integration (automatic yoast_head_json inclusion)\u003Cbr \u002F>\n– Multilingual support with Accept-Language headers (Polylang priority)\u003Cbr \u002F>\n– OpenAPI 3.0 export for API documentation (Swagger UI, Redoc)\u003Cbr \u002F>\n– Extensible via WordPress filters\u003Cbr \u002F>\n– WP-CLI integration for command-line usage\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin references external services for Postman Collection schema validation:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Postman Collection Schema Service\u003C\u002Fstrong>\u003Cbr \u002F>\n– \u003Cstrong>Service\u003C\u002Fstrong>: Postman Collection Schema (schema.getpostman.com)\u003Cbr \u002F>\n– \u003Cstrong>Purpose\u003C\u002Fstrong>: Used to validate and structure the generated Postman Collection JSON according to the official Postman Collection v2.1.0 specification\u003Cbr \u002F>\n– \u003Cstrong>Data sent\u003C\u002Fstrong>: No data is sent to this service. The plugin only references the schema URL for validation purposes\u003Cbr \u002F>\n– \u003Cstrong>When\u003C\u002Fstrong>: The schema URL is included in the generated collection metadata for Postman to validate the collection structure\u003Cbr \u002F>\n– \u003Cstrong>Terms of service\u003C\u002Fstrong>: https:\u002F\u002Fwww.postman.com\u002Flegal\u002Fterms-of-use\u002F\u003Cbr \u002F>\n– \u003Cstrong>Privacy policy\u003C\u002Fstrong>: https:\u002F\u002Fwww.postman.com\u002Flegal\u002Fprivacy-policy\u002F\u003C\u002Fp>\n\u003Cp>Note: This plugin does not send any user data to external services. The schema reference is purely for collection structure validation within the Postman application.\u003C\u002Fp>\n","Generate Postman Collection (v2.1.0) or OpenAPI 3.0 documentation for the WordPress REST API from the admin UI.",452,"6.9.4","6.2","8.1",[69,20,70,71,21],"collection","openapi","postman","https:\u002F\u002Fgithub.com\u002Fmksddn\u002FWP-MksDdn-Postman-Collection","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fmksddn-collection-for-postman.2.1.0.zip","2026-03-15T10:48:56.248Z",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":11,"num_ratings":85,"last_updated":86,"tested_up_to":52,"requires_at_least":66,"requires_php":87,"tags":88,"homepage":91,"download_link":92,"security_score":93,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"woocommerce-legacy-rest-api","WooCommerce Legacy REST API","1.0.5","Automattic","https:\u002F\u002Fprofiles.wordpress.org\u002Fautomattic\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fdeveloper.woocommerce.com\u002F2023\u002F10\u002F03\u002Fthe-legacy-rest-api-will-move-to-a-dedicated-extension-in-woocommerce-9-0\u002F\" rel=\"nofollow ugc\">The Legacy REST API will no longer part of WooCommerce as of version 9.0\u003C\u002Fa>. This plugin restores the full functionality of the removed Legacy REST API code in WooCommerce 9.0 and later versions.\u003C\u002Fp>\n\u003Cp>For all intents and purposes, having this plugin installed and active in WooCommerce 9.0 and newer versions is equivalent to enabling the Legacy REST API in WooCommerce 8.9 and older versions (via WooCommerce – Settings – Advanced – Legacy API). All the endpoints work the same way, and existing user keys also continue working.\u003C\u002Fp>\n\u003Cp>On the other hand, installing this plugin together with WooCommerce 8.9 or an older version is safe: the plugin detects that the Legacy REST API is still part of WooCommerce and doesn’t initialize itself as to not interfere with the built-in code.\u003C\u002Fp>\n\u003Cp>Please note that \u003Cstrong>the Legacy REST API is not compatible with \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fdocument\u002Fhigh-performance-order-storage\u002F\" rel=\"nofollow ugc\">High-Performance Order Storage\u003C\u002Fa>\u003C\u002Fstrong>. Upgrading the code that relies on the Legacy REST API to use the current WooCommerce REST API instead is highly recommended.\u003C\u002Fp>\n","The WooCommerce Legacy REST API, which is now part of WooCommerce itself but will be removed in WooCommerce 9.0.",400000,2304709,27,"2025-01-23T18:59:00.000Z","7.4",[21,89,90],"woo","woocommerce","https:\u002F\u002Fgithub.com\u002Fwoocommerce\u002Fwoocommerce-legacy-rest-api","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoocommerce-legacy-rest-api.1.0.5.zip",92,{"slug":95,"name":96,"version":97,"author":98,"author_profile":99,"description":100,"short_description":101,"active_installs":102,"downloaded":103,"rating":104,"num_ratings":105,"last_updated":106,"tested_up_to":107,"requires_at_least":108,"requires_php":48,"tags":109,"homepage":113,"download_link":114,"security_score":54,"vuln_count":13,"unpatched_count":13,"last_vuln_date":26,"fetched_at":27},"disable-json-api","Disable REST API","1.8","Dave McHale","https:\u002F\u002Fprofiles.wordpress.org\u002Fdmchale\u002F","\u003Cp>The most comprehensive plugin for controlling access to the WordPress REST API!\u003C\u002Fp>\n\u003Cp>Works as a “set it and forget it” install. Just upload and activate, and the entire REST API will be inaccessible to your general site visitors.\u003C\u002Fp>\n\u003Cp>But if you do need to grant access to some endpoints, you can do that too. Go to the Settings page and you can quickly whitelist individual endpoints (or entire branches of endpoints) in the REST API.\u003C\u002Fp>\n\u003Cp>You can even do this on a per-user-role basis, so your unauthenticated users have one set of rules while WooCommerce customers have another while Subscribers and Editors and Admins all have their own. NOTE: Out of the box, all defined user roles will still be granted full access to the REST API until you choose to manage those settings.\u003C\u002Fp>\n\u003Cp>For most versions of WordPress, this plugin will return an authentication error if a user is not allowed to access an endpoint. For legacy support, WordPress 4.4, 4.5, and 4.6 use the provided \u003Ccode>rest_enabled\u003C\u002Fcode> filter to disable the entire REST API.\u003C\u002Fp>\n","Disable the use of the REST API on your website to site users. Now with User Role support!",90000,753897,96,38,"2023-09-14T00:26:00.000Z","6.3.8","4.9",[110,19,111,112,21],"admin","json","rest","http:\u002F\u002Fwww.binarytemplar.com\u002Fdisable-json-api","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fdisable-json-api.zip",{"slug":116,"name":117,"version":118,"author":119,"author_profile":120,"description":121,"short_description":122,"active_installs":123,"downloaded":124,"rating":125,"num_ratings":126,"last_updated":127,"tested_up_to":65,"requires_at_least":16,"requires_php":17,"tags":128,"homepage":52,"download_link":131,"security_score":32,"vuln_count":132,"unpatched_count":13,"last_vuln_date":133,"fetched_at":27},"integromat-connector","Make Connector","1.6.6","Make","https:\u002F\u002Fprofiles.wordpress.org\u002Fintegromat\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.make.com\u002Fen?utm_source=wordpress&utm_medium=partner&utm_campaign=wordpress-partner-make\" rel=\"nofollow ugc\">Make\u003C\u002Fa> is a visual platform that lets you design, build, and automate anything – from simple tasks to complex workflows – in minutes. With Make, you can send information between WordPress and thousands of apps to drive traffic and improve sales potential. It’s fast and easy to use, visually intuitive and requires zero coding expertise.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Here are some of the ways to use WordPress with Make:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Add new WordPress users to your CMR and marketing tools, like Salesforce, ActiveCampaign, or Mailchimp\u003C\u002Fli>\n\u003Cli>Create new WordPress posts from incoming webhook data, Google Forms responses, or FreeScout conversations\u003C\u002Fli>\n\u003Cli>Share your WordPress posts on Facebook, Pinterest, or other social media platforms\u003C\u002Fli>\n\u003Cli>Send a message about new WordPress posts to messaging apps, like Slack, Telegram, or Microsoft Teams\u003C\u002Fli>\n\u003Cli>Create database items from your WordPress posts in Notion, MySQL, or any other database app\u003C\u002Fli>\n\u003Cli>Or choose a \u003Ca href=\"https:\u002F\u002Fwww.make.com\u002Fen\u002Ftemplates?utm_source=wordpress&utm_medium=partner&utm_campaign=wordpress-partner-program\" rel=\"nofollow ugc\">template\u003C\u002Fa> to help you get started. \u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>How to get started:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fwww.make.com\u002Fen\u002Fregister?utm_source=wordpress&utm_medium=partner&utm_campaign=wordpress-partner-program\" rel=\"nofollow ugc\">Sign up for Make\u003C\u002Fa>, and enjoy a free account forever. Or, choose a monthly or yearly plan with advanced features.\u003C\u002Fli>\n\u003Cli>Check \u003Ca href=\"https:\u002F\u002Fwww.make.com\u002Fen\u002Fhelp\u002Fapps\u002Fwebsite-building\u002Fwordpress#connecting-wordpress-to-make-968742?utm_source=wordpress&utm_medium=partner&utm_campaign=wordpress-partner-program\" rel=\"nofollow ugc\">Make’s documentation on how to connect WordPress\u003C\u002Fa>. \u003C\u002Fli>\n\u003Cli>Install the plugin, and \u003Ca href=\"https:\u002F\u002Fwww.make.com\u002Fen\u002Fintegrations\u002Fwordpress?utm_source=wordpress&utm_medium=partner&utm_campaign=wordpress-partner-program\" rel=\"nofollow ugc\">start building WordPress integrations on Make\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Get help from \u003Ca href=\"https:\u002F\u002Fwww.make.com\u002Fen\u002Fticket?utm_source=wordpress&utm_medium=partner&utm_campaign=wordpress-partner-program\" rel=\"nofollow ugc\">Make’s Support\u003C\u002Fa> team.\u003Cbr \u002F>\nMake’s \u003Ca href=\"https:\u002F\u002Fwww.make.com\u002Fen\u002Fterms-and-conditions?utm_source=wordpress&utm_medium=partner&utm_campaign=wordpress-partner-make\" rel=\"nofollow ugc\">Terms of use\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.make.com\u002Fen\u002Fprivacy-notice?utm_source=wordpress&utm_medium=partner&utm_campaign=wordpress-partner-make\" rel=\"nofollow ugc\">Privacy policy\u003C\u002Fa>.\u003C\u002Fp>\n","Make Connector. Make lets you design, build, and automate by connecting with WordPress in just a few clicks.",80000,472783,54,25,"2026-02-09T10:29:00.000Z",[19,129,130,112,21],"integromat","make","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fintegromat-connector.1.6.6.zip",3,"2025-09-03 21:08:50",{"attackSurface":135,"codeSignals":169,"taintFlows":178,"riskAssessment":179,"analyzedAt":182},{"hooks":136,"ajaxHandlers":147,"restRoutes":165,"shortcodes":166,"cronEvents":167,"entryPointCount":168,"unprotectedCount":13},[137,143],{"type":138,"name":139,"callback":140,"file":141,"line":142},"action","admin_menu","add_admin_menu","rest-api-route-tester.php",21,{"type":138,"name":144,"callback":145,"file":141,"line":146},"admin_enqueue_scripts","enqueue_scripts",22,[148,154,158,161],{"action":149,"nopriv":150,"callback":151,"hasNonce":152,"hasCapCheck":150,"file":141,"line":153},"wprrt_get_routes",false,"get_routes",true,23,{"action":155,"nopriv":150,"callback":156,"hasNonce":152,"hasCapCheck":152,"file":141,"line":157},"wprrt_test_route","test_route",24,{"action":159,"nopriv":150,"callback":160,"hasNonce":152,"hasCapCheck":150,"file":141,"line":126},"wprrt_get_user_roles","get_user_roles",{"action":162,"nopriv":150,"callback":163,"hasNonce":152,"hasCapCheck":152,"file":141,"line":164},"wprrt_get_route_examples","get_route_examples",26,[],[],[],4,{"dangerousFunctions":170,"sqlUsage":171,"outputEscaping":173,"fileOperations":13,"externalRequests":13,"nonceChecks":168,"capabilityChecks":176,"bundledLibraries":177},[],{"prepared":13,"raw":13,"locations":172},[],{"escaped":174,"rawEcho":13,"locations":175},5,[],2,[],[],{"summary":180,"deductions":181},"The \"rest-api-route-tester\" plugin v1.1.0 demonstrates a strong security posture based on the provided static analysis.  The plugin features a limited attack surface consisting solely of four AJAX handlers, all of which are appropriately protected with nonce and capability checks.  The absence of direct REST API routes, shortcodes, and cron events further minimizes potential entry points.  Crucially, the code shows excellent security practices, with no dangerous functions, file operations, or external HTTP requests.  All SQL queries utilize prepared statements, and all output is properly escaped, indicating a conscientious development approach.  The taint analysis results are also highly positive, with no flows exhibiting unsanitized paths, suggesting robust input validation and sanitization.",[],"2026-03-16T22:24:40.457Z",{"wat":184,"direct":193},{"assetPaths":185,"generatorPatterns":188,"scriptPaths":189,"versionParams":190},[186,187],"\u002Fwp-content\u002Fplugins\u002Frest-api-route-tester\u002Fassets\u002Fstyle.css","\u002Fwp-content\u002Fplugins\u002Frest-api-route-tester\u002Fassets\u002Fapp.js",[],[187],[191,192],"rest-api-route-tester\u002Fstyle.css?ver=","rest-api-route-tester\u002Fapp.js?ver=",{"cssClasses":194,"htmlComments":195,"htmlAttributes":196,"restEndpoints":197,"jsGlobals":202,"shortcodeOutput":204},[],[],[],[198,199,200,201],"\u002Fwp-json\u002Frest-api-route-tester\u002Fv1\u002Froutes","\u002Fwp-json\u002Frest-api-route-tester\u002Fv1\u002Ftest-route","\u002Fwp-json\u002Frest-api-route-tester\u002Fv1\u002Fuser-roles","\u002Fwp-json\u002Frest-api-route-tester\u002Fv1\u002Froute-examples",[203],"wprrt_vars",[]]