Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
As of April 2026, Disable XML-RPC Pingback is a WordPress rpc plugin with 60K+ active installations and a 3.9/5 rating from 14 reviews. It has been downloaded 421K+ times in total. Requires WordPress 4.8+ and PHP 5.6+. Available on WordPress.org since 2014. Downloads are down 15% this week. Top alternative: Simple XML-RPC Disabler.
Stops abuse of your site’s XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
This is more friendly than disabling totally XML-RPC, that it’s needed by some plugins and apps (I.e. Mobile apps or some Jetpack’s modules).
If you’re happy with the plugin please don’t forget to give it a good rating, it will motivate me to keep sharing and improving this plugin (and others).
Removes the following methods from XML-RPC interface.
The plugin author is still actively engaged with this excellently useful plugin. It receives updates only when needed which might be years in between updates. Still works great! Highly recommend.
There is better option than this plugin.
I have used disable xmlrpc api and its works fine for me.
This broke my site, I had to revert to a backup on the server after installing it.
Gran trabajo Samuel, en combinación con algunas reglas de htaccess hace un trabajo fantástico.
Thank you for this free and great plugin.
| WordPress | 4.8+ requiredTested up to 6.8.5 |
| PHP | 5.6+ required |
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.