Max Cutler

<p>This plugin brings XML-RPC API enhancements from the WordPress 3.4 release to previous versions<br />
of WordPress (3.3 and earlier). It also adds new user management methods.</p>
<p>It is derived from Prasath Nadarajah’s GSoC ’11 project to expand WordPress’ web services,<br />
although the exposed API methods are not compatible (different parameter names/types/orders).</p>
<h4>Methods</h4>
<p>New Methods:</p>
<ul>
<li>wp.newUser – create a new user</li>
<li>wp.editUser – edit user information</li>
<li>wp.deleteUser – delete a specfic user</li>
</ul>
<p>3.5 Methods for pre-3.5 sites:</p>
<ul>
<li>wp.getUser – get information about a specific user</li>
<li>wp.getUsers – retrieve a list of users</li>
<li>wp.getProfile – retrieve information about the requesting user</li>
<li>wp.editProfile – edit the profile of the requesting user</li>
<li>wp.getRevisions – retrieve revisions for a specific post</li>
<li>wp.restoreRevision – restore a post revision</li>
</ul>
<p>3.4 Methods for pre-3.4 sites:</p>
<ul>
<li>wp.newPost – create a new post (of any post type)</li>
<li>wp.editPost – edit a post (of any post type)</li>
<li>wp.deletePost – delete a post (of any post type)</li>
<li>wp.getPost  – get a specific post (of any post type)</li>
<li>wp.getPosts  – get a list of posts</li>
<li>wp.getPostType – get information about a specific post type</li>
<li>wp.getPostTypes – get a list of registered post types</li>
<li>wp.getTaxonomy – get information about a specific taxonomy</li>
<li>wp.getTaxonomies  – get a list of registered taxonomies</li>
<li>wp.newTerm  – create a new term in a taxonomy</li>
<li>wp.editTerm  – edit a term in a taxonomy</li>
<li>wp.deleteTerm  – delete a term in a taxonomy</li>
<li>wp.getTerm  – get information about a specific term in a taxonomy</li>
<li>wp.getTerms – get a list of term associated with a taxonomy</li>
</ul>


XML-RPC Modernization

excelent

This plugin updates the WordPress XML-RPC API to leverage the latest features of WordPress and move beyond the historical Blogger/metaWeblog/MT APIs.

Pascal CESCATO

<p>Secure your site’s XML-RPC by removing some methods, instead of disabling totally XML-RPC, which is needed by some plugins (eg. Jetpack) and some mobile apps.</p>
<h4>Features</h4>
<p>Removes the following methods from XML-RPC interface.</p>
<ul>
<li>system.multicall</li>
<li>system.listMethods</li>
<li>system.getCapabilities</li>
<li>pingback.extensions.getPingbacks</li>
<li>pingback.ping</li>
<li>X-Pingback from HTTP headers</li>
</ul>
<p>This is not perfect, but it will help prerventing attacks</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher.</li>
</ul>


stop XML-RPC Attacks

Secure your site's XML-RPC by removing some methods, while you can still use XML-RPC.

XML-RPC Modernization vs stop XML-RPC Attacks