HookAnywhere – Trigger Any Action, Send Anywhere
HookAnywhere is a powerful and flexible WordPress webhook plugin that lets you trigger outgoing webhooks from any WordPress action hook — including hooks from other plugins installed on your site. Unlike basic webhook plugins that only support limited core events, HookAnywhere allows you to select a specific WordPress plugin and dynamically access all available action hooks defined inside it. Simply choose the hook you want to listen to and instantly send structured data to any external API or webhook endpoint. Whether you’re integrating with Zapier, n8n, custom CRMs, marketing tools, or internal automation systems, this plugin gives you full control over how your WordPress site communicates with the outside world. Why HookAnywhere? Most free webhook plugins only support predefined WordPress core events. HookAnywhere goes further by allowing you to trigger webhooks from ANY action hook available on your site — including third-party plugins. This makes it a true universal WordPress integration tool. Core Features Trigger Any Action Hook – Select a specific WordPress plugin and access all registered action hooks inside it. Send Data to Any API or Webhook Endpoint – Works with REST APIs, automation platforms, and custom servers. Custom Headers & Authentication – Add custom HTTP headers, pass authorization tokens, or configure authentication for secure API communication. Flexible Body Parameters – Send structured JSON, form data, or custom request bodies. Advanced Logging System – View complete request and response logs including headers, payload, response body, status codes, and execution time. Log Retention Control – Automatically delete logs after a user-defined number of days to keep your database optimized. Role-Based Access Control – Restrict webhook and log access based on user roles. Log Export – Export webhook logs for reporting or migration. Perfect For WordPress developers Automation engineers No-code / low-code builders Agencies managing integrations Site owners connecting WordPress to external systems HookAnywhere removes limitations and gives you complete transparency and control over your WordPress API integrations. External services HookAnywhere includes an optional newsletter subscription feature during the onboarding process. If a user explicitly opts in, their Name and Email Address are transmitted to a self-hosted instance of n8n (an open-source workflow automation platform) operated by the plugin author, for the purpose of sending plugin-related and promotional email updates. n8n is open-source: https://github.com/n8n-io/n8n n8n Privacy Policy: https://n8n.io/legal/privacy/ No data is sent without the user’s explicit consent.
REST XML-RPC Data Checker
JSON REST API and XML-RPC API are powerful ways to remotely interact with WordPress. If you don’t have external applications that need to communicate with your WordPress instance using JSON REST API or XML-RPC API you should disable access to them for external requests. In the standard WordPress installation JSON REST API and XML-RPC API are enabled by default. In particular the REST API is turned on also for unlogged users. This means that your WordPress instance is potentially leaking data, for example anyone could be able to: copy easily your published contents natively with the REST API (and not with a web crawler); get the list of all users (with their ID, nickname and name); retrieve other information that you didn’t want to be public (such as an unlisted published page or a saved media not yet used). Even if you could do the stuff by writing your own code using native filters, this plugin aims to help you to control JSON REST API and XML-RPC API accesses from the administration panel or programmatically by a simple API filter. Basic Features Disable REST API interface for unlogged users. Disable JSONP support on REST API. Add Basic Authentication to REST API. Remove REST tags, REST Link HTTP header and REST Really Simple Discovery (RSD) informations. Setup trusted users, IP/Networks and endpoints for unlogged users REST requests. Change REST endpoint prefix. Disable XML-RPC API interface. Remove to the Really Simple Discovery (RDS) informations. Remove X-Pingback HTTP header. Setup trusted users, IP/Networks and methods for XML-RPC requests. Show user’s access informations in users list administration screen. Usage Once the plugin is installed you can control settings in the following ways: Using the Settings->REST XML-RPC Data Checker administration screen. Programmatically, by using rest_xmlrpc_data_checker_settings filter (see below). API Hooks rest_xmlrpc_data_checker_settings Filters plugin settings values. apply_filters( 'rest_xmlrpc_data_checker_settings', array $settings ) rest_xmlrpc_data_checker_admin_settings Filter allowing to display or not the plugin settings page in the administration. apply_filters( 'rest_xmlrpc_data_checker_admin_settings', boolean $display ) rest_xmlrpc_data_checker_rest_error Filter JSON REST authentication error after plugin checks. apply_filters( 'rest_xmlrpc_data_checker_rest_error', WP_Error|boolean $result ) xmlrpc_before_insert_post Filter XML-RPC post data to be inserted via XML-RPC before to insert post into database. apply_filters( 'xmlrpc_before_insert_post', array|IXR_Error $content_struct, WP_User $user )
