Check WordPress Website’s Public REST API Routes Check for WordPress Website's Public REST API Routes Enter the URL of a WordPress website to see what REST API routes are publicly available. While having publicly available routes isn't a security issue on its own, custom routes from plugins might not be properly secured, as we found was the case with a plugin from Automattic's WordPress VIP.