Simply disable XML-RPC on your WordPress site with a simple toggle switch. Protect your site from XML-RPC attacks and improve security.
As of April 2026, Simple Disable XML-RPC is a WordPress xml plugin with 1.0K+ active installations and a 5/5 rating from 5 reviews. It has been downloaded 8.8K+ times in total. Requires WordPress 6.1+ and PHP 7.4+. Available on WordPress.org since 2023. Download volume is stable this week. Top alternative: XML Sitemap & Google News.
Simple Disable XML-RPC is a lightweight, powerful WordPress plugin that gives you complete control over your site’s XML-RPC functionality. Protect your WordPress site from brute force attacks, DDoS attempts, and other XML-RPC security vulnerabilities with just one click.
XML-RPC is a remote communication protocol that allows external applications to interact with your WordPress site. While useful for some services, it’s frequently exploited by attackers for:
I always recommend this plugin for quickly disabling XML-RPC and boosting WordPress security. No config needed—just activate and done. Appreciate the effort!
It’s one of my go to plugin to make extra security layer. Thanks for this great plugin buddy.
Beautiful and easy plugin
I have install the plugin and it works fine. I highly recommend for try it out this must needed plugin. to disable XML-RPC and it’s very easy to us.
Simple is certainly appropriate for this very straightforward plugin “Simple Disable” – To improve our security I now have it installed on all my client websites hosted on Hostinger – (Jim, Neat Websites)
| WordPress | 6.1+ requiredTested up to 6.8.5 |
| PHP | 7.4+ required |
Major Update – UI Overhaul & Security Enhancements
…and 7 more changes
Plugin data sourced from WordPress.org. Analysis and metrics by PluginSift.