Does WP Ghost Work With BuddyBoss?

Yes. WP Ghost is compatible with the BuddyBoss platform including the BuddyBoss Theme. Social networking features, community tools, groups, forums, and membership functionality all work normally with WP Ghost’s path security active. One important note: leave the REST API path unchanged and do not disable REST API access if you use the BuddyBoss App or any BuddyBoss feature that relies on remote API access.

What Works

WP Ghost has been tested with the BuddyBoss website platform. Path security (changing admin, login, plugins, themes, wp-content, and wp-includes paths), the 7G/8G firewall, brute force protection, 2FA, and all security headers work alongside BuddyBoss without conflict. BuddyBoss social features like activity feeds, groups, forums, messaging, and member profiles continue functioning normally because they operate through standard WordPress page templates and AJAX calls, which WP Ghost handles transparently.

Important: REST API and the BuddyBoss App

BuddyBoss relies heavily on the WordPress REST API for its app-related functionality and remote integrations. The BuddyBoss App communicates with your site entirely through the REST API. If you change the REST API path in WP Ghost or disable REST API access, the BuddyBoss App will not be able to connect to your site.

If you use or plan to use the BuddyBoss App, follow these guidelines when configuring WP Ghost:

Leave the REST API path at the default wp-json. Go to WP Ghost > Change Paths > API Security and make sure the Custom wp-json Path field is either empty or set to the default wp-json. Do not change it to a custom path.

Do not disable REST API access. In the same API Security section, make sure Disable REST API Access is switched OFF. The BuddyBoss App needs unrestricted REST API access to function.

Do not disable the rest_route parameter. Some BuddyBoss features use the ?rest_route= parameter as a fallback for REST API access. Keep this parameter enabled.

All other WP Ghost features, including path security for the admin, login, plugins, themes, and uploads, work fine alongside BuddyBoss. You get full hack prevention on your site while keeping the API accessible for the BuddyBoss App. For the full REST API configuration guide, see the Change REST API Path tutorial.

BuddyBoss App Testing

WP Ghost has been tested with the BuddyBoss website framework but not with the BuddyBoss App specifically. If you use the BuddyBoss App, we recommend performing your own compatibility testing after configuring WP Ghost to confirm that all app features work as expected. The key is keeping the REST API accessible as described above.

Frequently Asked Questions

Can I hide the BuddyBoss plugin name in the page source?

Yes. Enable Hide Plugin Names in WP Ghost > Change Paths > Plugins Security to replace the “buddyboss-platform” directory name with a random code. BuddyBoss continues working normally because WP Ghost routes requests transparently. For details, see the Change Plugins Path tutorial.

Does WP Ghost work with the BuddyBoss Theme?

Yes. WP Ghost is compatible with the BuddyBoss Theme. Path security, theme name hiding, and all other WP Ghost features work without conflict. See the compatible themes list for all tested themes.

Can I use brute force protection on BuddyBoss registration forms?

WP Ghost’s brute force protection covers the standard WordPress login, registration, and lost password forms. If BuddyBoss uses the default WordPress registration form, it is protected automatically. For custom BuddyBoss registration forms built with page builders, you may need to add the shortcode. See the Brute Force Protection tutorial.

Does WP Ghost modify WordPress core files?

No. WP Ghost uses rewrite rules and WordPress filters. No core files, plugin files, or BuddyBoss files are modified. Deactivating WP Ghost restores all original paths instantly.