The unofficial WordPress Plugin Directory
Prevents public access to REST API user endpoints while allowing authorized roles.