Disable XML-RPC & Unset X-Pingback
This plugin disables XML-RPC API in WordPress 3.5+, which is enabled by default.
5(1 reviews)
·50 active installs·Updated 11 years agoAs of April 2026, Disable XML-RPC & Unset X-Pingback is a WordPress xmlrpc plugin with 50 active installations and a 5/5 rating from 1 reviews. It has been downloaded 2.2K+ times in total. Requires WordPress 3.5+ and PHP false+. Available on WordPress.org since 2014. Last updated 11 years ago — may have compatibility concerns. Top alternative: Disable XML-RPC.
5/51 reviews
50active installs
2.2K+total downloads
12 yearssince 2014
Overview
This plugin disables the XML-RPC API on a WordPress site running 3.5 or above and unsets the X-Pingback header.
Beginning in 3.5, XML-RPC is enabled by default. Additionally, the option to disable/enable XML-RPC was removed. For various reasons, site owners may wish to disable this functionality. This plugin provides an easy way to do so.
Ratings & Reviews
51 reviews
5 ★
1
4 ★
0
3 ★
0
2 ★
0
1 ★
0
Compatibility
| WordPress | 3.5+ requiredTested up to 3.9.40 |
| PHP | false+ required |
Top Alternatives to Disable XML-RPC & Unset X-Pingback
Frequently Asked Questions
Changelog
1.0
- Initial release
Contributors
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.