Kumibox-info vs REST XML-RPC Data Checker

Kumibox-info is a specialized tool for local news portals. It connects your WordPress site to the Kumibox-info API to automatically import news, alerts, and data relevant to your region (Police, Fire Department, Culture, Sports, Weather, Statistics, and more). This plugin provides a seamless dashboard for managing data sources, monitoring usage limits, and handling subscriptions. Key Features: Automated News Importing: Fetches news articles and creates WordPress posts automatically (Draft or Publish status). Smart Widgets: Display live data like Weather, NFZ (National Health Fund) queues, Tenders, and Statistics using simple Shortcodes (e.g., [kumiboxinfo_data id=”123″]). Client Dashboard: Manage your subscription, view usage stats, and configure data sources directly from the WP Admin. Categorization: Intelligent mapping of external categories (e.g., Police, Culture) to your system. Security: Built with WordPress nonces and capability checks to ensure secure data handling. Important: 3rd Party Service Disclaimer This plugin acts as a connector (client) for an external service. It sends requests to 3rd party APIs to function properly. Kumiboxinfo API (Main Service) This plugin connects to the Kumiboxinfo API servers (hosted at kumibox.net) to fetch news content, weather data, and configuration settings. To use this plugin, you must have an API Key. You can register for a Free account directly within the plugin interface. The plugin facilitates subscription payments for premium plans via Paddle. All payments are processed securely on Paddle’s servers; no credit card data is stored on your WordPress site. External services This plugin connects to the Kumiboxinfo API (hosted at https://paletyzer.kumibox.net/api5/) to fetch news content, weather data, and widget configurations. What data is sent: The plugin sends the saved API Key for authentication and the user’s email address when creating a new account or recovering a key. For weather and specific widgets, it may send latitude, longitude, or city names based on the user’s plugin configuration. When data is sent: Data is sent automatically in the background via WordPress Cron (hourly or according to the user’s plan), or manually when the user clicks “Refresh” or saves settings in the admin panel. Kumibox Terms of Service: https://kumibox.net/en/terms-of-service/ Kumibox Privacy Policy: https://kumibox.net/en/privacy/ This plugin also integrates with Paddle (https://paddle.com) to handle secure payments and subscription management. What data is sent: The user’s email address and API key are passed as URL parameters when opening the Paddle checkout link to pre-fill the form and link the subscription to the correct account. When data is sent: Only when the user manually clicks the “Buy” or “Choose Plan” buttons in the admin panel. Paddle Terms of Use: https://www.paddle.com/legal/terms Paddle Privacy Policy: https://www.paddle.com/legal/privacy 3rd Party Resources This plugin bundles the following third-party resources: Bootstrap (v5.3.0) Source: https://getbootstrap.com License: MIT Copyright 2011-2023 The Bootstrap Authors Bootstrap Icons (v1.10.0) Source: https://icons.getbootstrap.com License: MIT Copyright 2019-2023 The Bootstrap Authors

JSON REST API and XML-RPC API are powerful ways to remotely interact with WordPress. If you don’t have external applications that need to communicate with your WordPress instance using JSON REST API or XML-RPC API you should disable access to them for external requests. In the standard WordPress installation JSON REST API and XML-RPC API are enabled by default. In particular the REST API is turned on also for unlogged users. This means that your WordPress instance is potentially leaking data, for example anyone could be able to: copy easily your published contents natively with the REST API (and not with a web crawler); get the list of all users (with their ID, nickname and name); retrieve other information that you didn’t want to be public (such as an unlisted published page or a saved media not yet used). Even if you could do the stuff by writing your own code using native filters, this plugin aims to help you to control JSON REST API and XML-RPC API accesses from the administration panel or programmatically by a simple API filter. Basic Features Disable REST API interface for unlogged users. Disable JSONP support on REST API. Add Basic Authentication to REST API. Remove REST tags, REST Link HTTP header and REST Really Simple Discovery (RSD) informations. Setup trusted users, IP/Networks and endpoints for unlogged users REST requests. Change REST endpoint prefix. Disable XML-RPC API interface. Remove to the Really Simple Discovery (RDS) informations. Remove X-Pingback HTTP header. Setup trusted users, IP/Networks and methods for XML-RPC requests. Show user’s access informations in users list administration screen. Usage Once the plugin is installed you can control settings in the following ways: Using the Settings->REST XML-RPC Data Checker administration screen. Programmatically, by using rest_xmlrpc_data_checker_settings filter (see below). API Hooks rest_xmlrpc_data_checker_settings Filters plugin settings values. apply_filters( 'rest_xmlrpc_data_checker_settings', array $settings ) rest_xmlrpc_data_checker_admin_settings Filter allowing to display or not the plugin settings page in the administration. apply_filters( 'rest_xmlrpc_data_checker_admin_settings', boolean $display ) rest_xmlrpc_data_checker_rest_error Filter JSON REST authentication error after plugin checks. apply_filters( 'rest_xmlrpc_data_checker_rest_error', WP_Error|boolean $result ) xmlrpc_before_insert_post Filter XML-RPC post data to be inserted via XML-RPC before to insert post into database. apply_filters( 'xmlrpc_before_insert_post', array|IXR_Error $content_struct, WP_User $user )