REST XML-RPC Data Checker allow to check JSON REST and XML-RPC API requests and grant access permissions.
As of April 2026, REST XML-RPC Data Checker is a WordPress api plugin with 1.0K+ active installations and a 5/5 rating from 3 reviews. It has been downloaded 11K+ times in total. Requires WordPress 4.4+ and PHP 5.2.4+. Available on WordPress.org since 2018. Last updated 3 years ago — may have compatibility concerns. Downloads are up 8% this week. Top alternative: WP Consent API.
JSON REST API and XML-RPC API are powerful ways to remotely interact with WordPress.
If you don’t have external applications that need to communicate with your WordPress instance using JSON REST API or XML-RPC API you should disable access to them for external requests.
In the standard WordPress installation JSON REST API and XML-RPC API are enabled by default.
In particular the REST API is turned on also for unlogged users. This means that your WordPress instance is potentially leaking data, for example anyone could be able to:
This really is a great plugin. The only feature I would love to see is WP-CLI support.
A very useful plugin that works well. The plugin helped close access to the JSON REST API for unregistered users, and also nullified attacks on XML-RPC!
Having more options that I expected (i.e. enable/disable on user level). Thanks for nice plugin.
| WordPress | 4.4+ requiredTested up to 6.0.11 |
| PHP | 5.2.4+ required |
For REST XML-RPC Data Checker changelog, please see the Releases page on GitHub.
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.