# Managed by Puppet!

# 2026/07/21 RV: Updated with new CVE protection

# --- Place ruleset below ---#

# 2026/07/20 CVE-2026-63030: REST API batch-route confusion and SQL injection
if ($request_uri ~* "(/wp-json/batch/v[0-9]|rest_route=/?\??batch/v[0-9])") {
    return 403;
}