Disable XML-RPC-API
by Amin Nazemi 4.2 (43 reviews)

Disable XML-RPC-API

A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website

Disable XML-RPC-API ranks #394 among WordPress.org plugins with 100,000+ active installations, is #17 of 2,878 in the Discussion & Community category, a 4.2/5 rating from 43 reviews, and was last updated Feb 4, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.9 (Current: 7.1)
vtrunk Current Version vtrunk
Updated 7 months ago Last Update on 04 Feb, 2026
Refreshed 7 hours ago Last Refreshed on
#17 of 2,878 in Discussion & Community Top 1% by installs Downloads -25.1% this week
View on WordPress.org
Rank
#394
+2 this week
Active Installs
100K+
-28.1%
KW Avg Position
2.8
No change
Downloads
795.4K
+131 today
Support Resolved
0%
No change
Rating
84%
Review 4.2 out of 5
4.2 (43 reviews)

Next Milestone 200K

Total Progress 39.7%
100K+ 200K+
108
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 60,336 more installs to reach 200K+

Rank Changes

374 385 396 406 417 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026
374 385 397 408 419 31-08-2026 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026
Current #394
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

100 150 200 250 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026
100 150 200 250 300 31-08-2026 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

4.2
43 reviews
Overall 84%
5
33 (77%)
4
0 (0%)
3
1 (2%)
2
2 (5%)
1
7 (16%)

Support Threads Overview

Resolved
Unresolved
1
Total Threads
0
Resolved
1
Unresolved
0%
Resolution Rate

Security History

Source: WPVulnerability

No known vulnerabilities on record for Disable XML-RPC-API. Checked 1 week ago.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want to reduce security risks and server load from XML-RPC. It disables XML-RPC, pingbacks, and related features to protect against brute-force and DoS/DDoS attacks.

  • Disable access to xmlrpc.php
  • Auto-set htaccess to read-only
  • Disable X-pingback header
  • Disable selected XML-RPC methods
  • Remove pingback-ping link
  • Disable trackbacks and pingbacks
  • Rename XML-RPC slug
  • Black list and white list IPs

Frequently Asked Questions

Common questions about Disable XML-RPC-API

Disable XML-RPC-API has 100,000+ active installations on the WordPress.org plugin directory.
Disable XML-RPC-API holds a 4.2 out of 5 star rating based on 43 user reviews on WordPress.org.
Disable XML-RPC-API is developed by Amin Nazemi and published on the official WordPress.org plugin repository.
Disable XML-RPC-API requires WordPress 5.0 or higher and is tested up to WordPress 6.9.
Disable XML-RPC-API has been downloaded 795,354+ times from WordPress.org.
The latest version of Disable XML-RPC-API is trunk. It was last updated on February 4, 2026.
Yes. Disable XML-RPC-API is a free WordPress plugin available to download and install from the WordPress.org plugin directory.

Sign In / Register

You need to sign in or register to use this feature.