WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by Elementor v1.1.0

Sticklight

Use WordPress authentication and permissions in external React applications via secure REST API endpoints.

Sticklight

The facts

Active installs
200+
Price
Free
Last updated
3 Jun 2026
Added
May 2026
Requires WP
6.8
Tested up to
WP 7.0.4
Requires PHP
7.4
Downloads
998

Our analysis

AI-assisted

Sticklight is a WordPress plugin that enhances the WordPress user system for use in external applications, particularly those built with React. It extends the WordPress REST API by adding endpoints that allow authenticated clients to access user context and interact with WordPress data, while adhering to core authentication methods and permission checks.

This plugin is suitable for developers working on headless or hybrid WordPress setups, as well as those creating admin or user dashboards outside of the traditional WordPress admin interface. It provides a structured way to authenticate and manage user access for external tools requiring WordPress data.

Best for: Developers creating React applications or headless WordPress setups.

What it does well

  • ✓Extends WordPress REST API with additional endpoints
  • ✓Authenticates using wp_authenticate and Application Passwords
  • ✓Enforces WordPress capability checks on all requests
  • ✓Supports cross-origin headless setups
  • ✓Extensible via WordPress hooks and filters

Where it falls short

  • •Limited information on user feedback or ratings
  • •No details on specific use cases beyond those mentioned

Verdict

Sticklight offers a practical solution for integrating WordPress user management into external applications. It is particularly useful for developers looking to implement secure authentication in custom environments.

From the developer

Elementor's own description of Sticklight, lightly tidied.

Sticklight Connector provides a structured way to use the WordPress user system in external or React-based applications.

The plugin extends the WordPress REST API with additional endpoints that allow authenticated clients to retrieve user context and interact with WordPress data, while fully respecting core authentication methods, roles, and capability checks.

Sticklight does not replace WordPress authentication. It relies on wp_authenticate for credential validation and WordPress Application Passwords for API access, and follows standard permission checks (current_user_can) for all requests.

Typical use cases

  • React applications connected to a WordPress site
  • Headless or hybrid WordPress setups
  • Admin or user dashboards built outside wp-admin
  • External tools that require authenticated access to WordPress data

Features

  • Authenticates via wp_authenticate and issues Application Passwords for API access
  • Adds REST endpoints for login, logout, and retrieving current user context
  • Enforces WordPress capability checks on all requests
  • Supports cross-origin headless setups
  • Extensible via WordPress hooks and filters

Usage

Login

Authenticate with username (or email) and password:

POST /wp-json/sticklight/v1/auth/login

On success the response includes an Application Password for subsequent API requests and the authenticated user:

{
  "app_password": "XXXX XXXX XXXX XXXX XXXX XXXX",
  "user": {
    "user_id": 1,
    "username": "admin",
    "display_name": "Admin",
    "email": "admin@example.com",
    "roles": ["administrator"]
  }
}

Use the returned app_password with HTTP Basic Authentication for all further requests.

Current user

Retrieve the current authenticated user:

Read the full description on the official page →

Tagged as

purpose API & Integrations Security & Malware Protection User Registration & Profiles
feature REST API Roles & Permissions
quality Security
topic Rest-api Authentication Headless React Permissions Rest External Password Access Capabilities

Alternatives

Other plugins for integrating services.

LocoAI

LocoAI

89

LocoAI - Auto Translate For Loco Translate is a powerful tool for developers looking to quickly translate thei...

Free 70k+ installs 4.9★ (637)
Uncanny Automator

Uncanny Automator

88

The AI + Automation plugin for WordPress. Automate workflows across all your plugins and apps, add an AI agent...

Free 40k+ installs 4.9★ (156)
Open User Map

Open User Map

88

Create custom interactive maps with free Leaflet-based styles, no Google Maps API key, frontend marker submiss...

Free 10k+ installs 5★ (67)
Activity Log

Activity Log

87

Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audi...

Free 200k+ installs 4.3★ (74)
Reviews Feed

Reviews Feed

87

No API key required. Display Yelp and Google reviews for any business in a clean, customizable feed on your si...

Free 100k+ installs 4.4★ (34)
Bit integrations

Bit integrations

87

Contact Form, Google Sheet, MailChimp, Brevo, Webhook, Zoho CRM Automation and Integration plugin that Connect...

Free 20k+ installs 4.9★ (160)