re: The Wordpress Security Handbook 2019 - Part 2: Protect access and sessions VIEW POST

TOP OF THREAD FULL DISCUSSION
re: This is great. How do one know when any of his plugin is using REST API? as mentioned in 15.
 

Hi Loya,
there ain't no specific procedure to check that, but you can have a look at each plugin's description to make sure they don't use any service related to a WP REST API usage, you can however disable the service and, if some error comes up, you'll know which plugin is requiring the service.

 
code of conduct - report abuse