Top up $50+ and Get

Validity: 7 Feb - 14 Feb, 2026

Disable XML-RPC

Disable XML-RPC

Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.
Rating:
4.3
star-rating-1star-rating-2star-rating-3star-rating-4star-rating-5
Active Installations:
100000+
Last Updated:
Aug 16, 2023
WordPress Version:
3.5 or higher
Tested up to:
6.3.5

Disable XML-RPC API

Prevent unauthorized access to your WordPress site.

This plugin uses the built-in WordPress filter xmlrpc_enabled to disable the XML-RPC API on your site running version 3.5 or above. By disabling XML-RPC, you can prevent unauthorized access and protect your site from potential security threats.

Enable Enhanced Security

Safeguard your site by disabling XML-RPC.

1.0.1

  • Blank lines removed from the plugin file.

1.0

  • Initial release

Reduced to perfection

By art-at-tec (lrnz) on April 9, 2024

Dead simple as it should be. Nice, thank you for that.

Perfect plugin on updated WP version

By zaririnatma on February 10, 2024

It works perfectly on WordPress 6.4.3 (tested in 2 sites), without plugins conflict. See the tab FAQ to check that after instal, just test it on website quoted there: (xmlrpc-check) - if the test returns Fail on check xmlrpc the plugin worked. You can also run that test BEFORE instal the plugin to prove its work.

Does not work with Wordpress 6.4.2

By kuzavas on January 18, 2024

Does not work with Wordpress 6.4.2, xmlrpc-check tool still shows "All XML-RPC methods are available on the server"

Great Plugin

By charmingdoggo on December 19, 2023

Works perfect and is easy to use

No adware

By tomhung on September 9, 2022

No adware

Not working (WP 5.8.3)

By Илья (letraceursnork) on February 4, 2022

It just doesn't working

Excellent product!

By ryazhari on August 18, 2021

I have used this product on a dozen of the websites I have built and have had positive results without exception. This plugin simplifies the process of securing my websites by disabling XML-RPC, and has worked on all versions of WordPress I have used it with over the past couple of years. Great product, Highly recommended!

Plugin working fine on WP 5.6

By Felipe Romero (feliperomero) on December 11, 2020

Plugin is working just fine on WordPress 5.6. Cheers.

Not working

By advantagen on June 5, 2020

I'll add my voice to the growing choir of people saying this plugin no long works, unfortunately. At least not with WordPress v5.4.1. On the plus, all one has to do is change the permission of the xmlrpc.php (in the root of any WordPress domain) to 600, and problem solved.

Not working now

By iamphree on September 2, 2019

xmlrpc.php file Still alive
Try other plugins too!

Remove & Disable XML-RPC Pingback

Prevent pingback, XML-RPC and denial of service DDOS attacks by disabling the XML-RPC pingback functionality.

Try Demo More Details

Disable XML-RPC-API

A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website

Try Demo More Details

Disable XML-RPC

Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.

Try Demo More Details
Author Site Author Site

Try Disable XML-RPC With InstaWP

Contact Sales

Reach out to us to explore how InstaWP can benefit your business.