JWT Authentication for WP REST APIs

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. The recent download trend is too spiky to read.

1. ★★★★★ idoshariz

   6mo ago

   After 5 years of using the paid version of this plugin, I must say I am beyond impressed. We use this plugin to secure our API and manage the access keys for our REST API, and for nearly the entire time, it has worked flawlessly. In the rare instances where I encountered an issue, the team behind this plugin proved to be absolute professionals. They didn’t just send generic replies; they scheduled screen-sharing sessions with me and solved every problem quickly and efficiently. I want to give a special thanks to Vidushi Gupta. She has been incredibly helpful, kind, and professional throughout our interactions. Having someone like her to rely on makes all the difference. I will likely remain a customer for at least another 5 years. They are professional, highly efficient, and their customer service is top-notch! If you are looking for a reliable company with a team of experts you can trust, this is the one. Thank you so much, guys – and especially Vidushi – you are simply the best!

   Read on wp.org ↗
2. ★★★★★ Remwes, LLC

   8mo ago

   Great support from the MiniOrange team! Atul and Vidushi are very helpful and lightning fast to respond.

   Read on wp.org ↗
3. ★★★★★ pete207

   9mo ago

   Swapnil was very helpful in resolving my issue. I enjoyed the support received by the mini orange team.

   Read on wp.org ↗
4. ★★★★★ guglielmino

   11mo ago

   I needed support for some custom routes using miniOrang auth and support was great, helped me to solve my problems

   Read on wp.org ↗
5. ★★★★★ rvsg1

   1.3y ago

   Fast and easy support – even for the free version. Thank you

   Read on wp.org ↗
6. ★★★★★ Konafets

   1.4y ago

   This plugin deservers not even one star. It takes your API hostage in exchange of a premium membership. Absolutely insane.

   Read on wp.org ↗
7. ★★★★★ cavsusainc

   1.6y ago

   Excellent support This topic was modified 1 year, 5 months ago by cavsusainc. This topic was modified 1 year, 4 months ago by cavsusainc.

   Read on wp.org ↗
8. ★★★★★ seotaro

   1.6y ago

   The plugin works fine, but it keeps showing the horrible promotional banner and doesn’t give an option to hide it permanently.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 4.4.0 Compatibility with WordPress 7.0 4.4.0
2. — Version 4.3.0 Bug fixes. 4.3.0
3. — Version 4.2.0 Bug fixes. 4.2.0
4. — Version 4.1.0 Bug fixes. 4.1.0
5. — Version 4.0.0 Security enhancements. 4.0.0
6. — Version 3.9.0 UI Improvements 3.9.0

2 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. Medium · 4.3 WordPress REST API Authentication <= 3.6.3 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update ↗
   2025-04-16 CVE-2025-39545 Missing Authorization Affects <= 3.6.3 Patched in 3.6.4
2. High · 8.8 WordPress REST API Authentication <= 2.4.0 - Cross-Site Request Forgery ↗
   2022-11-09 CVE-2022-45073 Cross-Site Request Forgery (CSRF) Affects <= 2.4.0 Patched in 2.4.1

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-02-25 10K+ → 20K+ up after 365 days in tier
2. 2023-02-25 9K+ → 10K+ up after 26 days in tier
3. 2023-01-30 8K+ → 9K+ up after 29 days in tier
4. 2023-01-01 9K+ → 8K+ down after 3 days in tier
5. 2022-12-29 8K+ → 9K+ up after 1 days in tier
6. 2022-12-28 9K+ → 8K+ down after 7 days in tier
7. 2022-12-21 8K+ → 9K+ up after 71 days in tier
8. 2022-10-11 7K+ → 8K+ up

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Disable REST API 80K+ installs · 4.6★ · 2 shared tags D
• Make Connector 80K+ installs · 3.1★ · 2 shared tags B
• Disable WP REST API 30K+ installs · 4.6★ · 2 shared tags A
• WordPress REST API (Version 2) 10K+ installs · 4.1★ · 2 shared tags D
• WP REST API – OAuth 1.0a Server 8K+ installs · 3.8★ · 2 shared tags D
• REST API Toolbox 1K+ installs · 4.3★ · 2 shared tags C

Embed this report card

Drop a live Pulse card for JWT Authentication for WP REST APIs into a readme, a review or a deck. It updates itself.

JWT Authentication for WP REST APIs: 20K+ active installs, 4.4★ (74 reviews). Plugin Pulse (WP Mayor), as of 2026-08-29. https://plugins.wpmayor.com/plugin/wp-rest-api-authentication