Manage XML-RPC

Manage XML-RPC

Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from HTTP headers.
Rating:
3.0
star-rating-1star-rating-2star-rating-3star-rating-4star-rating-5
Active Installations:
7000+
Last Updated:
Dec 02, 2024
WordPress Version:
4.0 or higher
Tested up to:
6.7.2

Enhanced Security

Block XML-RPC to prevent Brute force attacks

Description: Safeguard your website by disabling XML-RPC and blocking unauthorized access, ensuring protection against potential brute force attacks.

Customized Access Control

Enable XML-RPC for specific IPs

1.0.2

  1. Fixed bugs and conducted compatibility checks with the latest WordPress version 6.7.1.
  2. Resolved warnings and errors identified during the compatibility assessment.

1.0.1

  • Beta release with basic testing.

My backend down after activating this plugin

By pharouk on January 18, 2023

After directly activating this plugin, the backend is no longer available and can't deactivate it or access the backend again

This error appears

Service UnavailableThe server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.

does not enable xml rpc at all.

By shop4seo on May 19, 2018

it might disable xml-rpc but it does not enable it. I have been unable to post to my wordpress, i whitelisted the ip using this plugin, it didn't help at all

easy modifiable xml-rpc setting

By . (lutjebroeker) on October 8, 2016

Easy in use! Works great!! Block entirely the access, block only pingback or/and allow/denay by IP

effectively stops xmlrpc brute force / dos

By mtreklivecom on September 3, 2016

simply works. I don't use jetpack and I don't care about ping backs... but I hate the staggering amount of xmlrpc attacks I've been seeing the past few months. This plugin can elegantly turn the https://your.website/xmlrpc.php URL into a 403 for the would-be attacker.

Thanks!

Try other plugins too!

Melapress File Monitor

Get alerted via email of file changes on your WordPress sites. No false positives!

Try Demo More Details

Protection Against DDoS

Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.

Try Demo More Details

Two-Factor

Enable Two-Factor Authentication using time-based one-time passwords (OTP, Google Authenticator), Universal 2nd Factor (FIDO U2F, YubiKey), email and …

Try Demo More Details
Screenshots
Author Site Author Site

Try Manage XML-RPC With InstaWP

Contact Sales

Reach out to us to explore how InstaWP can benefit your business.