Blog
How to Automatically Sync New YouTube Videos to WordPress
A one-time import goes stale the moment your channel publishes again. Here's how to keep WordPress in sync with YouTube automatically using scheduled syncs.
How to Block IPs Attacking Your WordPress REST API
Rate limiting throttles bad actors. IP blocklisting stops them entirely. Endpoint Manager Pro 1.3 adds manual blocking, auto-block thresholds, temporary and permanent bans, and an IP allowlist — all from the WordPress admin.
How to Import a YouTube Channel into WordPress as Posts
WordPress embeds a single YouTube video easily, but it won't bring a whole channel in as content you own. Here's how to import a channel as native posts.
How to Rate Limit WordPress REST API Endpoints Per-Route
WordPress has no native rate limiting for REST API endpoints. Endpoint Manager Pro 1.3 adds UI-configurable limits at the route level — tighter throttles on high-risk endpoints, looser on endpoints your integrations depend on.
Endpoint Manager 1.3 — Rate Limiting, IP Blocklisting, and Custom Error Responses
Endpoint Manager 1.3 ships per-endpoint rate limiting, IP blocklisting with auto-block, configurable error responses, and improved log filtering. All Phase 1 security hardening features are now available in Pro.
WordPress User Enumeration via the REST API: What It Is and How to Stop It
WordPress has shipped a built-in user enumeration vector since version 4.7: the REST API /wp/v2/users endpoint. It is enabled by default, requires no authentication, and returns login usernames. Here is how to stop it.
How to Disable Specific WordPress REST API Endpoints (Without Breaking Your Site)
Most WordPress hardening guides tell you to disable the REST API entirely. That breaks Gutenberg, WooCommerce, and half your plugins. The right move is surgical: block only the endpoints you do not need.