The default GET endpoints (for e.g. ) of the Wordpress Rest api are public and can be accessed by anyone.I am currently