All-In-One Security (AIOS)

If you are using the All-In-One Security (AIOS) – Security and Firewall plugin, make sure to not disable access to the WordPress REST API.

This plugin has a setting to disable the WordPress REST API access when you are not logged in. Enabling this setting will cause a 500 server error on refresh (when using facets), which causes FacetWP to malfunction.

To disable this setting, go to:
AIOS > Firewall > PHP rules > WP REST API > Disallow unauthorized REST requests

See also

• The FacetWP REST API
• Using FacetWP with the WordPress REST API Authentication plugin
• How to pass authentication data through REST API requests