WP Manifestindependent plugin directory
manifest / security / kiss-api-guard-plugin

KISS API Guard Plugin

Strips sensitive product data (stock quantities, sales counts, cost-of-goods) from unauthenticated WooCommerce REST API responses. Authenticated API key holders see the full response.

by KISS Plugins | Hypercart · github.com/kissplugins/kiss-api-guard-plugin

★ 0stars

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/kissplugins/kiss-api-guard-plugin/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/kissplugins/kiss-api-guard-plugin ↗

A simple WordPress plugin to restrict access to sensitive data via the WooCommerce REST API.

Description

This plugin helps to secure your WooCommerce store by restricting access to sensitive product data and user information for unauthenticated REST API requests.

Authenticated requests (using valid WooCommerce API keys) will continue to have full access to the data.

Features

  • Product Data Filtering: Removes sensitive product data like stock quantities, total sales, and cost-of-goods information from product and variation API responses for unauthenticated users.
  • User Endpoint Restriction: Blocks access to the /wp/v2/users endpoint for unauthenticated requests to prevent user enumeration attacks.
  • Configurable: You can enable or disable the restrictions from the WooCommerce settings page (WooCommerce > Settings > Advanced > API Restrictions).

Installation

  1. Download the plugin as a ZIP file.
  2. Go to Plugins > Add New in your WordPress admin.
  3. Click Upload Plugin and select the ZIP file.
  4. Activate the plugin.
  5. Configure the plugin settings under WooCommerce > Settings > Advanced > API Restrictions.

For Developers

The plugin uses the kiss_api_guard_sensitive_meta_keys filter to allow developers to customize the list of meta keys that are removed from the API response.