2x Leads & 50% Cost Savings on Hosting. Join Agency Program today.

Remove & Disable XML-RPC Pingback

Prevent pingback, XML-RPC and denial of service DDOS attacks by disabling the XML-RPC pingback functionality.

Rating:

3.0

Active Installations:

10000+

Last Updated:

Jul 25, 2023

WordPress Version:

5.2 or higher

Tested up to:

6.3.5

Features Download’s trend Changelog Reviews

Disable XML-RPC

Prevents WordPress from participating in pingback attacks.

Lower CPU Usage

Disabling XML-RPC reduces server CPU usage.

Prevent Attacks

Stops malicious scripts from using your site for pingback denial of service attacks.

Author’s Site

1.6

2023/07/24
Added filter to check for and remove ‘X-Pingback’ header if necessary.
Added settings page
Tested up to WP 6.2

1.5

Code hardening.
Verified compatibility with WP 5.9.3

1.4

New: Added a count under “Settings -> General” to see number of blocked attempts.
Tested up to WP 5.8
Added newsletter admin notice.
Code hardening.

1.3

2020/09/21
Cleaned up code
Added counter for number of times the pingback method was blocked.
Tested with WP 5.5.1
28,595 downloads

1.1

2019/04/09
version bump

1.0.0

First release

So many annoying admin notices ...

By mklusak on December 1, 2021

I am removing this plugin from my sites, because WP admin is constantly full of huge "join our newsletter" (...) admin notices. Yeah, no, thank you ...

Just what I needed

By Ben Roberts (bouncingsprout) on December 10, 2020

Great plugin, super easy to install and just sits there doing it's job. Very light as well, so has no effects that I could see, on site speed or memory usage. Can't think of a reason why you wouldn't be using this to be honest. Thanks for developing it!