Life Time Extra Credits Offer Extended

Validity: Dec 05 - Dec 12, 2025

CODE: INSTA41
Claim Your Deal Now
Log In
Get Started
WordPress Plugins
Disable XML-RPC Pingback

Disable XML-RPC Pingback

Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
Rating:
3.8
star-rating-1star-rating-2star-rating-3star-rating-4star-rating-5
Active Installations:
60000+
Last Updated:
Apr 06, 2024
WordPress Version:
4.8 or higher
Tested up to:
6.5.5
Try Demo
Download

Stops XML-RPC Abuse

Removes methods used by attackers.

This plugin stops abuse of your site's XML-RPC by removing methods commonly used by attackers. It allows you to keep using the rest of XML-RPC methods while protecting your site from potential attacks.

Simple and Effective

No more worries about XML-RPC attacks.

Author’s Site Author Site view

1.2.2

  • Improved WP version checking to avoid a notice under certain versions of WP.

1.2.1

  • Minor changes to make code 100% compliant with WordPress Coding Standards.

1.2

  • Added support for X-Pingback header removal in recent versions of WP.

1.1

  • Added code to remove X-Pingback from HTTP headers as suggested by user https://wordpress.org/support/topic/remove-x-pingback-http-header

1.0

  • Initial release.

This haven't updated over than a year

By morti037 on May 13, 2021

There is better option than this plugin. I have used disable xmlrpc api and its works fine for me.

Broke my site

By captainzandra on October 3, 2020

This broke my site, I had to revert to a backup on the server after installing it.

Fantástico plugin, imprescindible

By Fernando Tellado (fernandot) on January 20, 2017

Gran trabajo Samuel, en combinación con algunas reglas de htaccess hace un trabajo fantástico.

Great plugins

By wplike75 on November 19, 2016

Thank you for this free and great plugin.

Awesome and Effective Plugin.

By gmyoganand on September 3, 2016

Does what it says and this is what needed for a XMLRPC attacks.

Thanks.

I never installed this myself?

By yolandal on September 3, 2016

I'm confused here... I see this plugin I've never heard of and I never installed... and the bad thing is; I can't remove it!
If this is a security plugin it sure doesn't behave like it!
It's behaviour is a no-go for me.

Update: My hosting provider admittd they have installed this plugin. But they never notified me. So now I'm giving a 5 star rating.

More Reviews
Try other plugins too!
CTX Feed – WooCommerce Product Feed Manager Plugin

CTX Feed – WooCommerce Product Feed Manager Plugin

Generate error-free woocommerce product feed plugin for Google Shopping, Facebook Catalog, Pinterest Catalog, Idealo, Skroutz, TikTok & 100+ more …

Try Demo More Details
Custom Post Exporter

Custom Post Exporter

Export single or multiple posts, pages with comments, custom fields, categories, tags and more to an export file.

Try Demo More Details
Avatar Manager

Avatar Manager

Avatar Manager for WordPress is a sweet and simple plugin for storing avatars locally and more. Easily.

Try Demo More Details
Author Site Author Site

Try Disable XML-RPC Pingback With InstaWP

Try Demo

Contact Sales

Reach out to us to explore how InstaWP can benefit your business.