HWConnector Lite – Headless REST API & CORS
Configure ACF REST API, CORS, and a contact form endpoint for headless WordPress — all through the admin dashboard, without touching functions.php.
Use with caution
HWConnector Lite works, but test it on a staging site before relying on it in 2026. Was last updated 4 months ago, and scores 49/100 on our health check.
- Small user base (<10 active installs)
- Very few reviews so far
How does it stack up?
Side-by-side on installs, updates, ratings & support
Daily downloads
Download spikes usually follow a new release — each site that auto-updates counts as a download.
Rankings
Where HWConnector Lite stands todayWordPress.org search rankings
Live position in the plugin search, top 100| Keyword | Position |
|---|---|
| acf | >100 |
| cors | #27 |
| headless | #89 |
| Headless WordPress | #81 |
| rest-api | >100 |
About HWConnector Lite
From the official readme · v1.0.1Description
Every headless WordPress project requires the same setup: expose ACF fields to the REST API, configure CORS headers for your JavaScript frontend, and register a contact form endpoint.
HWConnector Lite moves all of that out of functions.php and into a clean, tabbed admin settings page.
Features
REST API Tab
* Expose ACF custom fields for post, page, and one Custom Post Type to the WordPress REST API
* No PHP required — configure through the admin dashboard
CORS Tab
* Add one allowed frontend origin (Next.js, Astro, Nuxt, etc.) through a simple field
* Correct headers sent for GET, POST, and OPTIONS (preflight) requests
* Origin-matched headers — only the requesting origin is echoed back
Endpoints Tab
* POST /wp-json/site/v1/contact — accepts name, email, message and forwards to your admin email
* Configurable namespace and send-to email
Security Tab
* Disable XML-RPC with one toggle (default: ON)
* Hide WordPress version from page source and RSS (default: ON)
Pro Version
HWConnector Pro unlocks:
- Unlimited CORS origins
- Unlimited Custom Post Types in the REST API
- Newsletter endpoint —
POST /wp-json/site/v1/newsletterwith FluentCRM integration
Who it’s for
Developers building headless WordPress sites with Next.js, Astro, Nuxt, SvelteKit, or any other JavaScript frontend who want a clean, reusable setup instead of copying functions.php boilerplate on every project.
Requirements
- WordPress 5.8+
- PHP 7.4+
- ACF (Advanced Custom Fields) — optional, required only for the REST API tab
Installation
- Upload the
headless-wp-connector-litefolder to/wp-content/plugins/ - Activate the plugin via the Plugins menu
- Go to Settings → Headless Connector in your WordPress admin
- Configure each tab and save
Frequently asked questions
Does this work with WordPress.com?
No. This plugin requires self-hosted WordPress (wordpress.org).
Do I need ACF installed?
Only for the REST API feature. CORS, the contact endpoint, and security work independently.
The contact form endpoint isn’t sending emails. What should I check?
WordPress uses wp_mail() which relies on your server’s mail configuration. On most shared hosts it works out of the box. If not, install an SMTP plugin like WP Mail SMTP and configure it with your mail provider.
CORS headers aren’t being sent. What should I check?
Confirm the origin is listed exactly as the browser sends it — including http:// or https://, no trailing slash Check that no other plugin is adding conflicting Access-Control-Allow-Origin headers
Endpoints return 404.
Go to Settings → Permalinks and click Save Changes to flush WordPress rewrite rules.
Do I need to know PHP?
No. The plugin handles all the PHP. You configure everything through the admin dashboard.
Changelog
Naming and prefix compliance update required for WordPress.org approval.
1.0.1
- Renamed plugin to remove trademark term from display name and slug
- Updated all function, class, constant, and option prefixes to meet WordPress.org guidelines (hwclite_)
- Added self as contributor to readme
- Security: added transient-based rate limiting on the contact endpoint (max 5 per IP per 10 minutes)
- Security: added input length validation on name (max 100 chars) and message (min 10, max 2000 chars)
- Security: added honeypot field to reject automated bot submissions
- Security: added explicit CRLF stripping on Reply-To header values as defence-in-depth
1.0.0
- Initial release
For developers
Is this your plugin? Show off the numbers.
Add a live badge to your site, docs or GitHub README. It updates on its own — no account needed.
Best HWConnector Lite alternatives
All acf plugins →
FAQ
HWConnector Lite: quick answers
Straight answers, pulled from live WordPress.org data.
Live data from WordPress.org · checked Oct 2, 2026
Is HWConnector Lite free?
Yes. HWConnector Lite is free to download and use from the official WordPress.org plugin directory.
Is HWConnector Lite safe to use in 2026?
HWConnector Lite works, but test it on a staging site before relying on it in 2026. Was last updated 4 months ago, and scores 49/100 on our health check.
How many websites use HWConnector Lite?
HWConnector Lite is active on <10 WordPress websites and has been downloaded 249 times since it launched in May 2026. It was downloaded 67 times in the last 30 days.
Does HWConnector Lite work with WordPress 7.1?
HWConnector Lite is officially tested up to WordPress 7.0.6, while the latest release is 7.1.2. It may still work, but try it on a staging site first.
What PHP version does HWConnector Lite need?
HWConnector Lite requires PHP 7.4 or higher. Most hosts run PHP 8.x today, so it works on any modern WordPress hosting.
When was HWConnector Lite last updated?
The latest version, 1.0.1, was released on May 27, 2026 (4 months ago).
Who makes HWConnector Lite?
HWConnector Lite is developed and maintained by markmym.
What are the best alternatives to HWConnector Lite?
The most popular alternatives to HWConnector Lite are Advanced Custom Fields (ACF… (2M+ installs), ACF Content Analysis for Yo… (100K+ installs) and Advanced Custom Fields: Ext… (100K+ installs).
Powered by PageForge
Want thousands of pages that rank like these? Build them in an afternoon.
This directory runs on the same engine as PageForge. Turn any spreadsheet, CSV or API into thousands of fast, SEO-ready WordPress pages — with schema, internal links and AI-written copy baked in.
- CSV, Google Sheets & API data sources
- AI content, schema & internal links per page
- Works with Elementor, Gutenberg, Yoast & Rank Math
- Free on WordPress.org — no credit card
