Plugin profile · observed daily since 02 Aug 2026
Headless REST API Security
Active installs40+ rounded
Current authorMd. Rakib Ullah
Owner changesNone while we have been watching
Last release6 months ago 22 Feb 2026
Support— no recent threads
Releases on record3
Rating5.0 /5 · 2
Added to directory20 Jan 2026
Requires WP5.8
Requires PHP7.4
Version lag0.2 behind
Tested up toWP 6.9.7 WordPress is now on 7.1
PluginPedia reports published data and observable changes. It does not rate plugin quality or safety, infer intent, or make recommendations. These are observations rather than a verdict. How this works
Ownership
Held by Md. Rakib Ullah throughout, with no change of ownership observed since daily tracking began on 02 Aug 2026.
Full observed history, including every field transition
Committing accounts
Read from the plugin’s public release log, so these predate this registry. A committing account is not an owner. Thirty accounts commit to WooCommerce and it has never changed hands.
| Account | Releases | First | Last |
|---|---|---|---|
| rakib417 | 2 | 20 Jan 2026 | 22 Feb 2026 |
This registry did not observe a transfer; it read these names off a public log. Whether that reflects a change of ownership is not something the directory publishes.
Adoption
How widely the plugin is installed, and what the people running it think of it. WordPress.org rounds install figures to one significant digit, so they describe an order of magnitude rather than a headcount.
Very early-stage: 40+ active installs. Too few installs to read anything into adoption. That is a gap in the evidence, not a mark against the plugin.
8 downloads a day over the last 7 days, steady against the 7 days before. Downloads are counted exactly and without a ceiling, so they show movement the rounded install figure cannot.
08 Aug 2026peak 13/day05 Sep 2026
Install band rose to 40+ on 01 Sep 2026, from 30+. Both figures are rounded to one significant digit, so the size of the change is not knowable from them.
Daily record
Every field we record, one column per observation. Fields that never moved are named once rather than repeated across every column. A row of identical numbers would be padding.
| Field | 23 Aug | 24 Aug | 25 Aug | 26 Aug | 27 Aug | 28 Aug | 29 Aug | 30 Aug | 31 Aug | 01 Sep | 02 Sep | 03 Sep | 04 Sep | 05 Sep |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Downloads that day | — | 11 | 13 | 12 | 11 | 11 | 0 | 12 | 11 | 11 | 0 | 0 | 11 | 11 |
| Active installs | 30+ | 30+ | 30+ | 30+ | 30+ | 30+ | 30+ | 30+ | 30+ | 40+ | 40+ | 40+ | 40+ | 40+ |
Unchanged throughout: ratings total (2) · version (2.2) · support threads (0) · threads resolved (0)
35 days of observation, most recent 14 shown.
Maintenance
When it was last released, and how far its declared compatibility has drifted from current WordPress.
Added to directory7 months ago 20 Jan 2026
Requires WP5.8
Requires PHP7.4
Version lag0.2 behind
Is anyone still maintaining this?
- Last released 22 Feb 2026, 195 days ago.
- Declares compatibility only up to WordPress 6.9.7, while 7.1 is current. The author has not confirmed it runs on the last 2 releases.
- The same account maintains 1 other plugin; the most recent update to any of them was 11 Feb 2026.
A plugin that does one thing correctly may need no changes for years; a long gap is not, by itself, evidence of neglect.
History
Everything dated that this registry holds about the plugin, most recent first. Releases carry the author’s own release date; everything else is dated to when it was observed.
Entries marked from the release log predate this registry, and daily observation began 02 Aug 2026. They were read from the plugin’s public SVN history after the fact, not watched as they happened. Everything else was observed directly.
- 02 Aug 20261 month agoInstall band moved to 30+Bands are rounded to one significant digit, so the size of the change is not knowable.
- 02 Aug 20261 month agoFirst observed by PluginPediaDaily snapshots of this plugin’s directory record begin here. Everything above this line is observed; anything before it comes from fields the API itself reports.
- 22 Feb 20266 months agoVersion 2.2 released
- 22 Feb 20266 months agoVersion 2.3 releasedfrom the release logCommitted by rakib417.
- 20 Jan 20267 months agoVersion 2.0 releasedfrom the release logCommitted by rakib417.
- 20 Jan 20267 months agoAdded to the WordPress.org directoryReported by the plugin API as the date this plugin was added.
What we know, and what we don’t
Everything on this page in one place, including the gaps, so that nothing here is mistaken for a clean bill of health.
What we know
- It has been held by Md. Rakib Ullah for all 35 days we have observed it.
- It was last released 6 months ago (22 Feb 2026).
- Its author declares it tested up to WordPress 6.9.7; WordPress is now on 7.1.
- WordPress.org reports 40+ active installs.
- It carries 2 ratings, averaging 5.0 out of 5.
What we don’t know yet
- No forum threads were open in the two months we measure, so how responsive its support is cannot be said. One new thread starts answering that.
Every record on this site, this one included, works under the same limits. We read what WordPress.org publishes about a plugin, never the plugin’s own code, so nothing here says whether a plugin is well built or safe. Install counts reach us already rounded; a change smaller than a band step doesn’t show. We don’t track security advisories yet. For anything older than our first observation we rely on the plugin’s public release log, where one exists. What this registry can and cannot see
Similar plugins
Plugins that share this one’s tags and talk about the same things in their own descriptions. Distinctive tags count for far more than broad ones. Sharing hover means something, sharing woocommerce does not, and a plugin that never mentions the subject matter is left out however its author tagged it. Among close matches, more widely installed plugins are listed first. This is a grouping rather than a ranking of quality.
Sticklight
Use WordPress authentication and permissions in external React applications via secure REST API endpoints.
200+ installsupdated 03 Jun 2026
Compare side by side Gallop
A REST API for headless Next.js sites: a page's post, SEO, and site data in one request, plus cookie login for authenticated front ends.
fewer than 10 installsupdated 22 Jun 2026
Compare side by side HeadlessKey – JWT Auth
A complete authentication solution for Headless WordPress applications using JWT, supporting Registration, SSO, RBAC, and advanced Security features.
fewer than 10 installsupdated 08 Feb 2026
Compare side by side Infospica Headless API
WordPress REST API plugin for headless CMS — custom namespace, full CRUD, CPT support, ACF integration, and secure authentication.
fewer than 10 installs5.0★ (2)updated 12 Jun 2026
Compare side by side NovaCraft API Builder
The free, WordPress.org-compatible REST API foundation for headless WooCommerce stores — JWT authentication, API keys, caching, and a React admin UI.
fewer than 10 installsupdated 14 Aug 2026
Compare side by side Hippoo Auth
Extend your WooCommerce Store API with secure authentication endpoints for social and manual login. Ideal for custom apps, headless themes, or fronten …
fewer than 10 installs5.0★ (1)updated 06 Jun 2026
Compare side by side Grouped from the tags each author chose for their own plugin, so the grouping is only as good as those tags.
Reach out about this record
Corrections, missing context, or anything else about Headless REST API Security: a person reads every submission, and corrections get a reply within 5 business days.