Title: Plugin breaks REST API even when disabled
Last modified: May 16, 2019

---

# Plugin breaks REST API even when disabled

 *  Resolved [Joris Le Blansch](https://wordpress.org/support/users/apiosys/)
 * (@apiosys)
 * [7 years ago](https://wordpress.org/support/topic/plugin-breaks-rest-api-even-when-disabled/)
 * This plugin looked very promising to me since I don’t like “enumerating” user
   details which I consider a data leak. I tried it on a test site and indeed a 
   query like /wp-json/wp/v2/users/1 will now properly not show user details when
   not logged in. But when checking the sanity report that was introduced in 5.2
   I am now getting erros on cURL error 28: Operation timed out after 10000 milliseconds
   with 0 bytes received and a warning on wp_version_check(). So not so good then.
   I disabled the plugin, issue remains. I deleted the plugin, issue remains. I 
   restored the whole site and db and the issue still remains… I don’t understand
   what traces it can leave to leave the REST API broek like that ? Doesn’t make
   sense to me… Any special things to take care off to completely remove all traces?
 * Kind regards,
 * Joris.

Viewing 3 replies - 1 through 3 (of 3 total)

 *  Plugin Author [fullworks](https://wordpress.org/support/users/fullworks/)
 * (@fullworks)
 * [7 years ago](https://wordpress.org/support/topic/plugin-breaks-rest-api-even-when-disabled/#post-11540631)
 * I’m sorry you are having difficulties, however the code is very straight forward
   and if you have disabled the plugin it does not operate, and if you have deleted
   there is nothing to operate.
 * The CURL error sounds like an issue with your test environment.
 * I can’t really be much more helpful, but if you would like to package up your
   test site and DB and send it to me I will happily take a look.
 *  Thread Starter [Joris Le Blansch](https://wordpress.org/support/users/apiosys/)
 * (@apiosys)
 * [7 years ago](https://wordpress.org/support/topic/plugin-breaks-rest-api-even-when-disabled/#post-11540745)
 * Of course you are right, throwing out the plugin should not leave any traces.
   I probably updated to many stuff at once incl. update to 5.2. Went through the
   classic check of disabling all other plugins and enabling them one by one and
   found out that “WP Simple Paypal Shopping cart” was the culprit. As soon as I
   get rid of that one the site health report is clean again… Sorry for bothering
   here with that. I have added your plugin also back in and the site report remains
   clean (and no more usernames are leaked). Many thanks. Joris.
 *  Plugin Author [fullworks](https://wordpress.org/support/users/fullworks/)
 * (@fullworks)
 * [7 years ago](https://wordpress.org/support/topic/plugin-breaks-rest-api-even-when-disabled/#post-11540764)
 * I am really glad you have sorted it out.

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘Plugin breaks REST API even when disabled’ is closed to new replies.

 * ![](https://ps.w.org/stop-user-enumeration/assets/icon-256x256.png?rev=1677689)
 * [Stop User Enumeration](https://wordpress.org/plugins/stop-user-enumeration/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/stop-user-enumeration/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/stop-user-enumeration/)
 * [Active Topics](https://wordpress.org/support/plugin/stop-user-enumeration/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/stop-user-enumeration/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/stop-user-enumeration/reviews/)

 * 3 replies
 * 2 participants
 * Last reply from: [fullworks](https://wordpress.org/support/users/fullworks/)
 * Last activity: [7 years ago](https://wordpress.org/support/topic/plugin-breaks-rest-api-even-when-disabled/#post-11540764)
 * Status: resolved