by Delower Hossain
5 (5 reviews)
Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks
Simply disable XML-RPC on your WordPress site with a simple toggle switch. Protect your site from XML-RPC attacks and improve security.
Tested up to WP 6.8.6 (Current: 7.0.2)
v1.4.0
Current Version v1.4.0
Updated 8 months ago
Last Update on 09 Nov, 2025
Refreshed 9 hours ago
Last Refreshed on
Rank
#6,218
-5 this week
Active Installs
1K+
—
No change
KW Avg Position
45.2
+0.4 better
Downloads
9.5K
+2 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(5 reviews)
Next Milestone 2K
1K+
2K+
1,038
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 327 more installs to reach 2K+
Rank Changes
Current
#6,218
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
5 reviews
Overall
100%
5
5
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Tracked Keywords
Showing 5 of 5| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| xmlrpc | 13 | — | Tag | 21 hours ago |
| disable xml | 13 | — | Tag | 21 hours ago |
| disable xml-rpc | 14 | — | Tag | 21 hours ago |
| xml | 51 | — | Tag | 21 hours ago |
| wordpress security | 135 | — | Tag | 21 hours ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.4.0
- Last Updated
- Nov 09, 2025
- Requires WP
- 6.1+
- Tested Up To
- 6.8.6
- PHP Version
- 7.4 or higher
- Author
- Delower Hossain
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 5
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
Adminify – White Label, Admin Menu Editor, Login Customizer
7K+ installs
#2,724
Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits
30K+ installs
#988
LiteSpeed Cache
7M+ installs
#5
Akismet Anti-spam: Spam Protection
5M+ installs
#7
Wordfence Security – Firewall, Malware Scan, and Login Security
5M+ installs
#11
Frequently Asked Questions
Common questions about Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks
XML-RPC is a remote procedure call protocol that allows external applications to communicate with your WordPress site. While it enables features like mobile apps and remote publishing, it's also a common target for: Brute force attacks DDoS attacks Server resource exhaustion Security vulnerabilities If you don't use WordPress mobile apps, Jetpack, or remote publishing tools, it's recommended to disable XML-RPC for better security.
No, this plugin safely disables XML-RPC using WordPress's native filter. However, it may affect: WordPress mobile apps Jetpack functionality Pingbacks and trackbacks Third-party services using XML-RPC API Test after activation to ensure your required features still work.
There are several ways to verify: Method 1: WordPress Mobile App Try connecting with the official WordPress mobile app. You should see: "XML-RPC services are disabled on this site" Method 2: Online Validator Use the XML-RPC Validator tool. When properly disabled, it will show an error message. You should receive a response indicating XML-RPC is disabled.
Yes! When XML-RPC is disabled, your server doesn't need to process XML-RPC requests, which can: Reduce server load Prevent resource exhaustion Speed up response times Save bandwidth
Yes! Simple Disable XML-RPC works seamlessly with other security plugins like: Wordfence Security Sucuri Security iThemes Security All In One WP Security And more!
Plugin Method (Recommended): * Uses WordPress native filters * Easier to manage * No server configuration needed * Can be toggled on/off easily * Won't cause server errors .htaccess Method: * Requires manual file editing * Can break if edited incorrectly * Harder to reverse * May cause conflicts
Absolutely! Just go to Settings > Disable XML-RPC and toggle the switch off. Changes take effect immediately.
Yes, the plugin works on both single WordPress installations and multisite networks. On multisite, it must be configured per-site.
Yes! We actively maintain this plugin and test it with every new WordPress release. Updates are pushed regularly to ensure compatibility and security.
WordPress.org Support Forum GitHub Issues Plugin Documentation