WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by Enrico Sorcinelli v1.4.0

REST XML-RPC Data Checker

REST XML-RPC Data Checker allow to check JSON REST and XML-RPC API requests and grant access permissions.

REST XML-RPC Data Checker

The facts

Rating
5★ from 3
Active installs
900+
Price
Free
Last updated
4 Aug 2022
Added
Nov 2018
Requires WP
4.4
Tested up to
WP 6.0.14
Requires PHP
5.2.4
Downloads
11,681

Our analysis

AI-assisted

REST XML-RPC Data Checker is a WordPress plugin that allows you to manage access to the JSON REST API and XML-RPC API. It is designed for users who want to enhance the security of their WordPress site by disabling these APIs for unlogged users and controlling access through various settings.

The plugin provides options to disable the REST API and XML-RPC interfaces, add authentication, and manage trusted users and IP addresses. It also includes features to remove certain headers and links related to the APIs, making it suitable for those concerned about data exposure.

Best for: This plugin is best for WordPress site administrators focused on security and API access control.

What it does well

  • ✓Disables REST API for unlogged users
  • ✓Supports Basic Authentication for REST API
  • ✓Allows management of trusted users and IPs
  • ✓Provides options to remove unnecessary API links and headers
  • ✓User access information displayed in admin screen

Where it falls short

  • •Limited feature information available
  • •No user reviews or detailed feedback provided

Verdict

REST XML-RPC Data Checker offers useful features for managing API access, though more detailed user feedback would be beneficial.

From the developer

Enrico Sorcinelli's own description of REST XML-RPC Data Checker, lightly tidied.

JSON REST API and XML-RPC API are powerful ways to remotely interact with WordPress.

If you don’t have external applications that need to communicate with your WordPress instance using JSON REST API or XML-RPC API you should disable access to them for external requests.

In the standard WordPress installation JSON REST API and XML-RPC API are enabled by default.
In particular the REST API is turned on also for unlogged users. This means that your WordPress instance is potentially leaking data, for example anyone could be able to:

  • copy easily your published contents natively with the REST API (and not with a web crawler);
  • get the list of all users (with their ID, nickname and name);
  • retrieve other information that you didn’t want to be public (such as an unlisted published page or a saved media not yet used).

Even if you could do the stuff by writing your own code using native filters, this plugin aims to help you to control JSON REST API and XML-RPC API accesses from the administration panel or programmatically by a simple API filter.

Basic Features

  • Disable REST API interface for unlogged users.
  • Disable JSONP support on REST API.
  • Add Basic Authentication to REST API.
  • Remove REST <link> tags, REST Link HTTP header and REST Really Simple Discovery (RSD) informations.
  • Setup trusted users, IP/Networks and endpoints for unlogged users REST requests.
  • Change REST endpoint prefix.
  • Disable XML-RPC API interface.
  • Remove <link> to the Really Simple Discovery (RDS) informations.
  • Remove X-Pingback HTTP header.
  • Setup trusted users, IP/Networks and methods for XML-RPC requests.
  • Show user’s access informations in users list administration screen.

Usage

Once the plugin is installed you can control settings in the following ways:

  • Using the Settings->REST XML-RPC Data Checker administration screen.
  • Programmatically, by using rest_xmlrpc_data_checker_settings filter (see below).

API

Hooks

rest_xmlrpc_data_checker_settings

Filters plugin settings values.

apply_filters( 'rest_xmlrpc_data_checker_settings', array $settings )

rest_xmlrpc_data_checker_admin_settings

Read the full description on the official page →

Tagged as

purpose API & Integrations
feature REST API
topic Security Xmlrpc Json Rest Xml-rpc Access Check Disable Filter Filters

Alternatives

Other plugins for integrating services.

LocoAI

LocoAI

89

LocoAI - Auto Translate For Loco Translate is a powerful tool for developers looking to quickly translate thei...

Free 70k+ installs 4.9★ (637)
Uncanny Automator

Uncanny Automator

88

The AI + Automation plugin for WordPress. Automate workflows across all your plugins and apps, add an AI agent...

Free 40k+ installs 4.9★ (156)
Open User Map

Open User Map

88

Create custom interactive maps with free Leaflet-based styles, no Google Maps API key, frontend marker submiss...

Free 10k+ installs 5★ (67)
Activity Log

Activity Log

87

Monitor every change on your WordPress site — who did what, when, and where it came from — for a complete audi...

Free 200k+ installs 4.3★ (74)
Reviews Feed

Reviews Feed

87

No API key required. Display Yelp and Google reviews for any business in a clean, customizable feed on your si...

Free 100k+ installs 4.4★ (34)
Bit integrations

Bit integrations

87

Contact Form, Google Sheet, MailChimp, Brevo, Webhook, Zoho CRM Automation and Integration plugin that Connect...

Free 20k+ installs 4.9★ (160)