by Bill Minozzi 4.7 (15 reviews)

Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan

Name: Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan
Rating: 4.7 (15 reviews)
Author: Bill Minozzi

Firewall, Scanner, block user enumeration & TOR, disable Json API, xmlrpc & Pingback, Hide Version, Login error message, Notifications, more...

Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop Us… ranks #6,487 among WordPress.org plugins with 1,000+ active installations, is #169 of 1,576 in the Authentication category, a 4.7/5 rating from 15 reviews, and was last updated Jan 19, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.9 (Current: 7.1)

v6.38 Current Version v6.38

Updated 7 months ago Last Update on 19 Jan, 2026

Refreshed 16 hours ago Last Refreshed on

#169 of 1,576 in Authentication Top 10% by installs

View on WordPress.org

Rank

#6,487

— No change

Active Installs

1K+

-24%

KW Avg Position

24.4

0.2 better

Downloads

299.7K

+3 today

Support Resolved

100%

— No change

Rating

94%

Review 4.7 out of 5

4.7 (15 reviews)

Next Milestone 2K

Total Progress 31.3%

1K+ 2K+

1,347

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 687 more installs to reach 2K+

Rank Changes

Current #6,487

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.7

15 reviews

Overall 94%

14 (93%)

0 (0%)

1 (7%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

100%

Resolution Rate

Security History

Source: WPVulnerability

4 known vulnerabilities on record · 0 in the last 24 months · checked 1 month ago

Feb 27, 2024

Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan [antihacker] < 4.53 (closed)

CVE-2024-1861 · Fixed in v4.53
Feb 27, 2024

Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan [antihacker] < 4.52 (closed)

CVE-2024-1860 · Fixed in v4.52
Dec 22, 2023

Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan [antihacker] < 4.35 (closed)

CVE-2023-50858 · Fixed in v4.35
Nov 21, 2022

Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan [antihacker] < 4.20 (closed)

CVE-2022-3880 · Fixed in v4.20

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 6.38
Last Updated: Jan 19, 2026
Requires WP: 4.0+
Tested Up To: 6.9
PHP Version: N/A
Author: Bill Minozzi

Support & Rating

Rating: ★ ★ ★ ★ ★ 4.7
Reviews: 15
Support Threads: 2
Resolved: 100%

Keywords

Block Tor antimalware disable malware scanner wordpress security tools

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,752

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,007

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force Prevention

All-In-One Security (AIOS) – Security and Firewall

1M+ installs

#62

MainWP Child - Securely Connects to the MainWP Dashboard to Manage Multiple Sites

700K+ installs

#86

View all Authentication plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want to protect their site from hackers, bots, and malware without needing external services. It provides a firewall, malware scanner, login protection, and options to disable XML-RPC, Pingback, and the JSON REST API to reduce common attack vectors.

Malware scanner with YARA rules
Firewall against malicious requests
Brute-force login protection
File integrity monitor
Disable Json REST API
Disable XMLRPC and Pingback
Block user enumeration and TOR
Hide WordPress version number

Frequently Asked Questions

Common questions about Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan

Install via WordPress.org: Search for the plugin within your WordPress admin panel under "Plugins" -> "Add New." Click the "Install Now" button. Activate the plugin through the 'Plugins' menu in WordPress. Manual Installation:

Extract the contents. Upload the extracted folder to the 'wp-content/plugins/' directory of your WordPress installation. Activate the plugin from the "Plugins" page in your WordPress admin panel.

The file "ruler.txt" is a security-related file that contains signatures or patterns used to identify and detect malware. It includes nearly 900 malware signatures, which are used to compare files and data against known patterns of malicious code in order to identify potential threats. The presence of such a file is a standard practice in security software, and it should not be a cause for concern. It indicates that your antivirus or security tool is actively scanning and protecting your system against known malware threats.

You can find the Online Manual at http://antihackerplugin.com/?p=20.

The Online FAQ page is available at http://antihackerplugin.com/faq/.

For support, please visit http://billminozzi.com/support/.

You can find more free tips on our blog at https://antihackerplugin.com/blog/.

Our WordPress anti-hacker plugin significantly boosts your site’s security by disabling WordPress XML-RPC feature. WordPress XML-RPC is a protocol that allows remote access to your WordPress site, but it has been known to be susceptible to various XML-RPC exploits and XML-RPC attacks. Disabling XML-RPC with our plugin prevents potential XML-RPC attacks and XML-RPC exploits, ensuring that your site remains secure from unauthorized access and other security threats. By using our plugin to disable XML-RPC in WordPress, you can protect your site from these vulnerabilities without compromising functionality.

To prevent unauthorized login attempts and receive timely notifications, I recommend using the "AntiHacker" plugin. This plugin addresses the issue by adding an email field to the login page, ensuring that only whitelisted users can log in. When an unauthorized login attempt occurs, the plugin triggers a login error message, informing the user that their access is denied. Additionally, AntiHacker offers robust security features, including login lockdown to prevent multiple failed attempts, and comprehensive login alerts. You will receive admin login notifications and login notifiers to keep you updated on any suspicious activity. With AntiHacker, you can stay informed through login notifications and maintain control over your site's security.

Our plugin allows you to initiate a high-speed scan to identify security breaches instantly. By comparing your files against the official repository, we ensure that no unauthorized changes have been made to your system. This answer can solve also this questions: Website security scan, File integrity check, Core file monitoring, Checksum validation, Scan for malicious code.