

Restrict the WordPress REST API to logged-in users with one filter. Keep an allowlist of public routes such as oEmbed or the WooCommerce Store API.

Stop posts from being published until a category and one of its subcategories are checked. Save Draft keeps working, and the editor shows the error.
3rd party plugins actions admin admin bar archive block-themes block editor Blocks caching capabilities core CSS custom post types development filters full site editing gutenberg hook hooks Image img load styles maintenance media mu-plugin Must Have npm Oxygen performance php plugins rest api scripts organizer security single product theme.json Tips transients updates users WooCommerce wordpress wp-cli wp-cron WP Admin