Hello,

we experience very high amount of calls of /wp-json/front-end-pm/v1/notification, it is the top request by path, even more frequent than the main site.

This doesn’t seem normal to me, is it?

Moreover, when I call it in browser I get response:
{“code”:”rest_forbidden”,”message”:”Sorry, you are not allowed to do that.”,”data”:{“status”:401}}

I’m logged in. I don’t know if all calls return this error, or some are successful.

It could be a malicious attack, what does this script to? Can I block it in our web firewall?

Thanks in advance.