Batch REST Guard — WordPress Security Plugin
by vladanrs · WordPress.org page
Batch REST Guard has 100+ active installs on WordPress.org and 535 downloads all time. It was downloaded 189 times in the last 30 days. The last update was on August 10, 2026, tested up to WordPress 7.0.7.
Batch REST Guard at a glance
Is Batch REST Guard well maintained?
Features
The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.
- Blocks the attack entry point — stops unauthenticated requests to /wp-json/batch/v1 and ?rest_route=/batch/v1 (including POST body bypasses that fool some WAF…
- Keeps your site working — logged-in users and the block editor (Gutenberg) continue to work normally
- Blocks known exploit tools — rejects requests from automated wp2shell scanners
- Alerts you if core is still vulnerable — reminds you to update to 6.8.6, 6.9.5, 7.0.2 or later
- Finds signs of an existing hack — warns about suspicious admin users (w2s_*, wp2_*, wpsvc_*) and fake plugins (site-tweaks-…, admin-utils-…, content-tools-……
Download and install history
303 downloads over the last 49 days. Snapshots taken daily from WordPress.org.
Details
Block wp2shell REST batch attacks (CVE-2026-63030). Detect fake admins and backdoor plugins. Extra security for hacked sites.
The full description, screenshots and every review live on the WordPress.org page.
Rankings Batch REST Guard competes in
Tags
- exploit
- hacked
- malware
- rest-api
- security
More from vladanrs
-
Balada Fix 10+ installs
- Version
- 1.2.5
- Last updated
- Aug 10, 2026
- First published
- Aug 10, 2026
- Requires WordPress
- 4.1
- Tested up to
- 7.0.7
- Requires PHP
- 7.2
- Pricing
- Free on WordPress.org
Batch REST Guard FAQ
What does Batch REST Guard do?
According to its WordPress.org readme, Batch REST Guard offers Blocks the attack entry point — stops unauthenticated requests to /wp-json/batch/v1 and ?rest_route=/batch/v1 (including POST body bypasses that fool some WAF, Keeps your site working — logged-in users and the block editor (Gutenberg) continue to work normally, Blocks known exploit tools — rejects requests from automated wp2shell scanners, Alerts you if core is still vulnerable — reminds you to update to 6.8.6, 6.9.5, 7.0.2 or later and Finds signs of an existing hack — warns about suspicious admin users (w2s_*, wp2_*, wpsvc_*) and fake plugins (site-tweaks-…, admin-utils-…, content-tools-.
How many active installs does Batch REST Guard have?
WordPress.org reports 100+ active installs for Batch REST Guard as of October 23, 2026.
Is Batch REST Guard still maintained?
Yes. The last release was on August 10, 2026 and it is tested up to WordPress 7.0.7.
Is Batch REST Guard free?
Batch REST Guard is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.