WordPress XMLRPC is widely used by third party application to communicate with WordPress sites and do almost everything without opening the site or even the admin panel. You can read posts, write new post and even update your plugins, activate, etc. I had earlier developed a WordPress plugin (Kish Multi Pro) which was used by 1000’s for managing multiple blogs.


WordPress is moving towards WordPress REST API which can do similar things. I recently started working on this and developed a simple theme using Framework7 which is full featured HTML framework to build iOS and Android Apps. You can check out this site on your iPhone or iPad.

Using REST API, you can pull information from WordPress installation as you can do using XML-RPC. Many applications have started using the REST API and as per Matt, this would be the future.


1 thought on “WordPress REST API Vs XML-RPC”

  1. You can take a look to REST XML-RPC Data Checker (https://wordpress.org/plugins/rest-xmlrpc-data-checker/) plugin: it allows an extended access control to the XML-RPC and REST APIs (enabling also by user/IP/method or endopoint)

    REST Api is enabled by default and you should to know that this way, a WordPress instance is potentially leaking data (for example anyone could be able to copy easily your published contents natively, get the list of all users or retrieve other information that you didn’t want to be public).


Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

%d bloggers like this: