by Amin Nazemi
4.1 (42 reviews)
Disable XML-RPC-API
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Compatible with WP 6.9.4
v2.1.7
Current Version v2.1.7
Updated 3 months ago
Last Update on 04 Feb, 2026
Refreshed 20 hours ago
Last Refreshed on
Rank
#400
—
No change
Active Installs
100K+
-30.2%
KW Avg Position
2
—
No change
Downloads
804.4K
+121 today
Support Resolved
0%
—
No change
Rating
82%
Review 4.1 out of 5
4.1
(42 reviews)
Next Milestone 200K
100K+
200K+
115
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 61,828 more installs to reach 200K+
Rank Changes
Current
#400
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
4.1
42 reviews
Overall
82%
5
32
(76%)
4
0
(0%)
3
1
(2%)
2
2
(5%)
1
7
(17%)
Tracked Keywords
Showing 5 of 5| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| xmlrpc | 1 | — | Tag | 1 day ago |
| pingback | 1 | — | Tag | 1 day ago |
| disable xmlrpc | 1 | — | Tag | 1 day ago |
| stop brute force attacks | 2 | — | Tag | 1 day ago |
| disable xml-rpc | 5 | — | Tag | 1 day ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 2.1.7
- Last Updated
- Feb 04, 2026
- Requires WP
- 5.0+
- Tested Up To
- 6.9.4
- PHP Version
- N/A
- Author
- Amin Nazemi
Support & Rating
- Rating
- ★ ★ ★ ★ ☆ 4.1
- Reviews
- 42
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
7K+ installs
#2,707
Master Addons For Elementor – Widgets, Extensions, Theme Builder, Popup Builder & Template Kits
30K+ installs
#964
Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin
200K+ installs
#261
Photo Gallery by 10Web - Mobile-Friendly Image Gallery
200K+ installs
#280
WP-Sweep
100K+ installs
#286
Frequently Asked Questions
Common questions about Disable XML-RPC-API
Yes, You can find the "XML-RPC Security" in your admin menu.
There are three easy methods for checking if XML-RPC is off: 1. Easiest way is going to this url: http://yourdomain/xmlrpc.php enter your domain name instead of 'yourdomain' if you see "Access forbidden!" or "403 error" it's working. 2. First, try using an XML-RPC client, like the official WordPress mobile apps. The WordPress mobile app should tell you that "XML-RPC services are disabled on this site" if the plugin is activated. 3. Or you can try the XML-RPC Validator, written by Danilo Ercoli of the Automattic Mobile Team - the tool is available at http://xmlrpc.eritreo.it/ with a blog post about it at http://daniloercoli.com/2012/05/15/wordpress-xml-rpc-endpoint-validator/. Keep in mind that you want the validator to fail and tell you that XML-RPC services are disabled. Something doesn't seem to be working correctly If the plugin is activated, but XML-RPC appears to still be working ... OR ... the plugin is deactivated, but XML-RPC is not working, then it's possible that another plugin or theme function is affecting the plugin functions.