domains / families / security / wp-plugin-rest-auth-bypass

wp-plugin-rest-auth-bypass

separate

Scan WordPress REST API plugin endpoints for unauthenticated state-changing operations — discover write endpoints (POST/PUT/PATCH/DELETE) exposed without auth, enumerate all plugin routes, and test for unauthorized content publishing, settings modification, and data leakage.

When to use

• Target is a WordPress site with exposed users via `/wp-json/wp/v2/users`.
• You've found interesting plugin namespaces from `/wp-json/` but need to map their routes.
• Standard WordPress endpoints return 401 — but third-party plugin endpoints might not.
• You want to find hidden admin URLs, debug endpoints, or unauthenticated write operations.

When not to use

• Standard WordPress endpoints returning 401

Skill page

Source