by Delower Hossain 5 (5 reviews)

Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks

Name: Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks
Rating: 5.0 (5 reviews)
Author: Delower Hossain

Simply disable XML-RPC on your WordPress site with a simple toggle switch. Protect your site from XML-RPC attacks and improve security.

Simple Disable XML-RPC ranks #6,183 among WordPress.org plugins with 1,000+ active installations, is #366 of 4,482 in the Security category, a 5/5 rating from 5 reviews, and was last updated Nov 9, 2025. Data from WordPress.org, refreshed twice daily — see methodology.

Tested up to WP 6.8 (Current: 7.1)

v1.4.0 Current Version v1.4.0

Updated 10 months ago Last Update on 09 Nov, 2025

Refreshed 11 hours ago Last Refreshed on

#366 of 4,482 in Security Top 10% by installs Downloads +7.5% this week

View on WordPress.org

Rank

#6,183

— No change

Active Installs

1K+

-32.2%

KW Avg Position

47.2

— No change

Downloads

8.7K

+11 today

Support Resolved

— No change

Rating

100%

Review 5 out of 5

5 (5 reviews)

Next Milestone 2K

Total Progress 13%

1K+ 2K+

6,134

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 870 more installs to reach 2K+

Rank Changes

Current #6,183

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0

5 reviews

Overall 100%

5 (100%)

0 (0%)

Support Threads Overview

Resolved

Unresolved

Total Threads

Resolved

Unresolved

Resolution Rate

Security History

Source: WPVulnerability

No known vulnerabilities on record for Simple Disable XML-RPC. Checked 1 month ago.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 1.4.0
Last Updated: Nov 09, 2025
Requires WP: 6.1+
Tested Up To: 6.8
PHP Version: 7.4 or higher
Author: Delower Hossain

Support & Rating

Rating: ★ ★ ★ ★ ★ 5
Reviews: 5
Support Threads: 1
Resolved: 0%

Keywords

disable xml disable xml-rpc wordpress security xml xmlrpc

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,752

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

Akismet Anti-spam: Spam Protection

5M+ installs

Wordfence Security - Firewall, Malware Scan, and Login Security

5M+ installs

#11

Really Simple Security - Simple and Performant Security (formerly Really Simple SSL)

Limit Login Attempts Security - Login Security, 2FA, Firewall, Brute Force Prevention

View all Security-and-spam-protection plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners who want to disable XML-RPC to reduce security risks. It solves the problem of XML-RPC being exploited for brute force attacks, DDoS attempts, resource exhaustion, and pingback vulnerabilities.

One-click toggle switch
Removes X-Pingback header
Translation ready
Mobile responsive settings page
Clean uninstall removes data
Card-based admin interface
OOP code organization
No external API calls

Frequently Asked Questions

Common questions about Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks

XML-RPC is a remote procedure call protocol that allows external applications to communicate with your WordPress site. While it enables features like mobile apps and remote publishing, it's also a common target for: Brute force attacks DDoS attacks Server resource exhaustion Security vulnerabilities If you don't use WordPress mobile apps, Jetpack, or remote publishing tools, it's recommended to disable XML-RPC for better security.

No, this plugin safely disables XML-RPC using WordPress's native filter. However, it may affect: WordPress mobile apps Jetpack functionality Pingbacks and trackbacks Third-party services using XML-RPC API Test after activation to ensure your required features still work.

There are several ways to verify: Method 1: WordPress Mobile App Try connecting with the official WordPress mobile app. You should see: "XML-RPC services are disabled on this site" Method 2: Online Validator Use the XML-RPC Validator tool. When properly disabled, it will show an error message. You should receive a response indicating XML-RPC is disabled.

Yes! When XML-RPC is disabled, your server doesn't need to process XML-RPC requests, which can: Reduce server load Prevent resource exhaustion Speed up response times Save bandwidth

Yes! Simple Disable XML-RPC works seamlessly with other security plugins like: Wordfence Security Sucuri Security iThemes Security All In One WP Security And more!

Plugin Method (Recommended): * Uses WordPress native filters * Easier to manage * No server configuration needed * Can be toggled on/off easily * Won't cause server errors .htaccess Method: * Requires manual file editing * Can break if edited incorrectly * Harder to reverse * May cause conflicts

Absolutely! Just go to Settings > Disable XML-RPC and toggle the switch off. Changes take effect immediately.

Yes, the plugin works on both single WordPress installations and multisite networks. On multisite, it must be configured per-site.

Yes! We actively maintain this plugin and test it with every new WordPress release. Updates are pushed regularly to ensure compatibility and security.

WordPress.org Support Forum GitHub Issues Plugin Documentation