Disable XML-RPC-API
by Amin Nazemi 4.2 (43 reviews)

Disable XML-RPC-API

A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website

Disable XML-RPC-API ranks #388 among WordPress.org plugins with 100,000+ active installations, is #17 of 2,958 in the Discussion & Community category, a 4.2/5 rating from 43 reviews, and was last updated Feb 4, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.9 (Current: 7.1.4)
vtrunk Current Version vtrunk
Updated 8 months ago Last Update on 04 Feb, 2026
Refreshed 1 day ago Last Refreshed on
#17 of 2,958 in Discussion & Community Top 1% by installs Downloads -31.6% this week
View on WordPress.org
Rank
#388
— No change
Active Installs
100K+
-28.9%
KW Avg Position
3
— No change
Downloads
795.4K
+86 today
Support Resolved
0%
— No change
Rating
84%
Review 4.2 out of 5
4.2 (43 reviews)

Next Milestone 200K

Total Progress 41.4%
100K+ 200K+
106
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 58,564 more installs to reach 200K+

Rank Changes

367 377 388 398 408 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
367 379 390 402 413 17-10-2026 18-10-2026 19-10-2026 20-10-2026 21-10-2026 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
Current #388
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

50 100 150 200 250 300 350 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
0 100 200 300 400 500 17-10-2026 18-10-2026 19-10-2026 20-10-2026 21-10-2026 22-10-2026 23-10-2026 24-10-2026 25-10-2026 26-10-2026 27-10-2026 28-10-2026 29-10-2026 30-10-2026 31-10-2026 01-11-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.2
43 reviews
Overall 84%
5
33 (77%)
4
0 (0%)
3
1 (2%)
2
2 (5%)
1
7 (16%)

Support Threads Overview

Resolved
Unresolved
1
Total Threads
0
Resolved
1
Unresolved
0%
Resolution Rate

Security History

Source: WPVulnerability

No known vulnerabilities on record for Disable XML-RPC-API. Checked 1 week ago.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want to reduce security risks and server load from XML-RPC. It disables XML-RPC, pingbacks, and related features to protect against brute-force and DoS/DDoS attacks.

  • Disable access to xmlrpc.php
  • Auto-set htaccess to read-only
  • Disable X-pingback header
  • Disable selected XML-RPC methods
  • Remove pingback-ping link
  • Disable trackbacks and pingbacks
  • Rename XML-RPC slug
  • Black list and white list IPs

Frequently Asked Questions

Common questions about Disable XML-RPC-API

Disable XML-RPC-API has 100,000+ active installations on the WordPress.org plugin directory.
Disable XML-RPC-API holds a 4.2 out of 5 star rating based on 43 user reviews on WordPress.org.
Disable XML-RPC-API is developed by Amin Nazemi and published on the official WordPress.org plugin repository.
Disable XML-RPC-API requires WordPress 5.0 or higher and is tested up to WordPress 6.9.
Disable XML-RPC-API has been downloaded 795,354+ times from WordPress.org.
The latest version of Disable XML-RPC-API is trunk. It was last updated on February 4, 2026.
Yes. Disable XML-RPC-API is a free WordPress plugin available to download and install from the WordPress.org plugin directory.

Sign In / Register

You need to sign in or register to use this feature.