diff --git a/PLAN.md b/PLAN.md
index ef1f2db..a164528 100644
--- a/PLAN.md
+++ b/PLAN.md
@@ -194,7 +194,14 @@ This document outlines the implementation plan for the WP BnB Management plugin.
   - 24 panels with gauges, pie charts, and stat displays
 - [x] Update settings page to enable/disable metrics
 
-## Phase 10: Security Audit (v0.10.0)
+### Phase 10: API Endpoints (v0.10.0)
+
+- [ ] REST API for rooms
+- [ ] REST API for availability
+- [ ] REST API for bookings
+- [ ] Authentication and rate limiting
+
+## Phase 11: Security Audit (v0.11.0)
 
 - [ ] Check for Wordpress best-practices
 - [ ] Review the code for OWASP Top 10, including XSS, XSRF, SQLi and other critical threads
@@ -208,13 +215,6 @@ This document outlines the implementation plan for the WP BnB Management plugin.
 - [ ] Order management
 - [ ] Refund handling
 
-### API Endpoints
-
-- [ ] REST API for rooms
-- [ ] REST API for availability
-- [ ] REST API for bookings
-- [ ] Authentication and rate limiting
-
 ### Multi-language Support
 
 - [ ] Full translation support
@@ -317,5 +317,6 @@ The plugin will provide extensive hooks for customization:
 | 0.7.0   | CF7 Integration    | Complete |
 | 0.8.0   | Dashboard          | Complete |
 | 0.9.0   | Prometheus Metrics | Complete |
-| 0.10.0  | Security Audit     | TBD      |
+| 0.10.0  | API Endpoints      | TBD      |
+| 0.11.0  | Security Audit     | TBD      |
 | 1.0.0   | Stable Release     | TBD      |