Rev3rseSecurity / wordpress-modsecurity-ruleset

ModSecurity Rule Set for WordPress (WPRS)
102 stars 24 forks source link

Prevent User Enumeration using wp-json #1

Closed theMiddleBlue closed 6 years ago

theMiddleBlue commented 6 years ago

This PR add rule 22200033 in order to prevent user enumeration by requesting /wp-json/wp/v*/users. By setting wprs_allow_user_enumeration to 0, all requests to /wp-json/wp/v[0-9]+/users will be blocked.