WordPress REST API Security: I Audited 966 Routes
A 9.8 authentication bypass in WooCommerce Social Login came down to decoding a token instead of verifying it. I audited 966 REST routes on a live WordPress install to see what that really exposes.
