This plugin allows to disable permanently REST API on WordPress 4.7+
安装:
This section describes how to install the plugin and get it working.
Upload the plugin files to the /wp-content/plugins/disable-permanently-rest-api directory, or install the plugin through the WordPress plugins screen directly.
Activate the plugin through the "Plugins" screen in WordPress