With WordPress 4.7 REST API is part of the core.
At the year everyone has read access to the REST API.
As result of that intruder can retrieve list of user slugs from wp-json wp v2 users.
This plugin disables REST API user endpoints to obscure the user slugs...
Upload 'smntcs-disable-rest-api-user-endpoints to the wp-content plugins directory.
Activate the plugin through 'Plugins in WordPress...
Activate the plugin through 'Plugins in WordPress.....
I just can't imagine your woocommerce customers login likes being exposed from the REST API.
Though REST API is excellent feature.
Browse the code recheck out SVN repository or subscribe to the development log RSS....
Read more