Pinny’s REST Lock – Block REST User Enumeration
by Pinny Fried · Security
Also makes 2 other plugins · 200+ installs across the portfolio →
Prevents public access to REST API user endpoints while allowing authorized roles.
80 health vs 64 average across 997 Security plugins
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Biggest win: Rating quality
To rank higher: Too few reviews to rank on quality — nudge happy users to leave one.
Get the full rank-higher report →Daily downloads
Since 2026-01-25 · 218 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
73
now · peak 78
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Occasionally updatedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
1
releases in the last 12 months
3mo ago
latest release · v1.0.0
1
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “30+”. Our estimate pins where the real number sits.
Modeled within the band wp.org reports; tightens as we track daily.
At the current install trend, crossing 40+ in roughly 365 days.
Install history · since 2026-01-27 · 170 observations
Estimated value
What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.
Est. annual revenue
Est. acquisition value
No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.
Details
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2026-08-31 20+ → 30+ up after 52 days in tier
- 2026-07-10 10+ → 20+ up after 139 days in tier
- 2026-02-21 — → 10+ up
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
-
Password Strength Settings for WooCommerce 10K+ installs · 4.3★ · 2 shared tags D -
Expire User Passwords 3K+ installs · 4.0★ · 2 shared tags B -
REST XML-RPC Data Checker 900+ installs · 4.1★ · 2 shared tags D -
Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 1 shared tag A -
Hostinger Tools 3M+ installs · 3.6★ · 1 shared tag B -
Really Simple Security – Simple and Performant Security (formerly Really Simple SSL) 3M+ installs · 4.9★ · 1 shared tag A
Embed this report card
Drop a live Pulse card for Pinny’s REST Lock – Block REST User Enumeration into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/pinnys-rest-lock" width="480" height="300" style="border:0" loading="lazy" title="Pinny’s REST Lock – Block REST User Enumeration — Plugin Pulse"></iframe> Pinny’s REST Lock – Block REST User Enumeration: 30+ active installs, 0.0★ (0 reviews). Plugin Pulse (WP Mayor), as of 2026-08-31. https://plugins.wpmayor.com/plugin/pinnys-rest-lock