Category: Security

How the WordPress REST API leaks your usernames - JSON response showing the slug jemee exposed to anyone
royjemee
Royjemee
July 12, 2026
7 Min read

How the WordPress REST API Leaks Your Usernames (and How to Stop It)

The WordPress REST API exposes every author username to anyone by default. See how the leak works, why it matters, and how to disable REST API access.
1
Coupons