diff --git src/js/_enqueues/wp/api-request.js src/js/_enqueues/wp/api-request.js
index 3ed1c68695..045f4eb985 100644
--- src/js/_enqueues/wp/api-request.js
+++ src/js/_enqueues/wp/api-request.js
@@ -69,7 +69,8 @@
 			}
 		}
 
-		if ( addNonceHeader ) {
+		// Force the addiction of the nonce header for self requests only.
+		if ( addNonceHeader && -1 !== url.indexOf( wpApiSettings.root ) ) {
 			// Do not mutate the original headers object, if any.
 			headers = $.extend( {
 				'X-WP-Nonce': wpApiSettings.nonce
