by Neatma
4.1 (42 reviews)
Disable XML-RPC-API
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Tested up to WP 6.8 (Current: 6.9)
vtrunk
Current Version vtrunk
Updated 8 months ago
Last Update on 23 Apr, 2025
Synced 14 hours ago
Last Synced on
Rank
#400
—
No change
Active Installs
100K+
—
No change
KW Avg Position
2
—
No change
Downloads
782.2K
+49 today
Support Resolved
0%
—
No change
Rating
82%
Review 4.1 out of 5
4.1
(42 reviews)
Next Milestone 200K
100K+
200K+
118
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 55,925 more installs to reach 200K+
Rank Changes
Current
#400
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.1
42 reviews
Overall
82%
5
32
(76%)
4
0
(0%)
3
1
(2%)
2
2
(5%)
1
7
(17%)
Tracked Keywords
Showing 5 of 5| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| xmlrpc | 1 | — | Tag | 16 hours ago |
| pingback | 1 | — | Tag | 16 hours ago |
| disable xmlrpc | 1 | — | Tag | 16 hours ago |
| stop brute force attacks | 2 | — | Tag | 16 hours ago |
| disable xml-rpc | 5 | — | Tag | 16 hours ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- trunk
- Last Updated
- Apr 23, 2025
- Requires WP
- 5.0+
- Tested Up To
- 6.8
- PHP Version
- N/A
- Author
- Neatma
Support & Rating
- Rating
- ★ ★ ★ ★ ☆ 4.1
- Reviews
- 42
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
7K+ installs
#2,735
Master Addons For Elementor - White Label, Free Widgets, Hover Effects, Conditions, & Animations
40K+ installs
#929
User Switching
200K+ installs
#252
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
200K+ installs
#256
Photo Gallery by 10Web – Mobile-Friendly Image Gallery
200K+ installs
#267
Frequently Asked Questions
Common questions about Disable XML-RPC-API
Yes, You can find the "XML-RPC Security" in your admin menu.
There are three easy methods for checking if XML-RPC is off: 1. Easiest way is going to this url: http://yourdomain/xmlrpc.php enter your domain name instead of 'yourdomain' if you see "Access forbidden!" or "403 error" it's working. 2. First, try using an XML-RPC client, like the official WordPress mobile apps. The WordPress mobile app should tell you that "XML-RPC services are disabled on this site" if the plugin is activated. 3. Or you can try the XML-RPC Validator, written by Danilo Ercoli of the Automattic Mobile Team - the tool is available at http://xmlrpc.eritreo.it/ with a blog post about it at http://daniloercoli.com/2012/05/15/wordpress-xml-rpc-endpoint-validator/. Keep in mind that you want the validator to fail and tell you that XML-RPC services are disabled. Something doesn't seem to be working correctly If the plugin is activated, but XML-RPC appears to still be working ... OR ... the plugin is deactivated, but XML-RPC is not working, then it's possible that another plugin or theme function is affecting the plugin functions.