by MonarchWP
5 (6 reviews)
Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks
Simply disable XML-RPC on your WordPress site with a simple toggle switch. Protect your site from XML-RPC attacks and improve security.
Tested up to WP 6.8 (Current: 6.9)
v1.4.0
Current Version v1.4.0
Updated 2 months ago
Last Update on 09 Nov, 2025
Synced 14 hours ago
Last Synced on
Rank
#6,305
—
No change
Active Installs
1K+
-35.1%
KW Avg Position
49.6
—
No change
Downloads
8.1K
+19 today
Support Resolved
0%
—
No change
Rating
100%
Review 5 out of 5
5
(6 reviews)
Next Milestone 2K
1K+
2K+
921
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro
Unlock Exact Install Count
See the precise estimated active installs for this plugin, calculated from real-time ranking data.
- Exact install estimates within tiers
- Track install growth over time
- Milestone progress predictions
Need 475 more installs to reach 2K+
Rank Changes
Current
#6,305
Change
Best
#
Downloads Growth
Downloads
Growth
Peak
Upgrade to Pro
Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.
Upgrade NowReviews & Ratings
5.0
6 reviews
Overall
100%
5
6
(100%)
4
0
(0%)
3
0
(0%)
2
0
(0%)
1
0
(0%)
Tracked Keywords
Showing 5 of 5| Keyword | Position | Change | Type | Updated |
|---|---|---|---|---|
| xmlrpc | 7 | — | Tag | 17 hours ago |
| disable xml-rpc | 12 | — | Tag | 17 hours ago |
| disable xml | 15 | — | Tag | 17 hours ago |
| xml | 26 | — | Tag | 17 hours ago |
| wordpress security | 188 | — | Tag | 17 hours ago |
Unlock Keyword Analytics
Track keyword rankings, search positions, and discover new ranking opportunities with a Pro subscription.
- Full keyword position tracking
- Historical ranking data
- Competitor keyword analysis
Track This Plugin
Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.
Start Tracking FreePlugin Details
- Version
- 1.4.0
- Last Updated
- Nov 09, 2025
- Requires WP
- 6.1+
- Tested Up To
- 6.8
- PHP Version
- 7.4 or higher
- Author
- MonarchWP
Support & Rating
- Rating
- ★ ★ ★ ★ ★ 5
- Reviews
- 6
- Support Threads
- 0
- Resolved
- 0%
Keywords
Upgrade to Pro
Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.
Upgrade NowSimilar Plugins
WP Adminify – White Label WordPress, Admin Menu Editor, Login Customizer
7K+ installs
#2,736
Master Addons For Elementor - White Label, Free Widgets, Hover Effects, Conditions, & Animations
40K+ installs
#929
Query Monitor - The developer tools panel for WordPress
200K+ installs
#255
MalCare WordPress Security Plugin - Malware Scanner, Cleaner, Security Firewall
200K+ installs
#258
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more
200K+ installs
#261
Frequently Asked Questions
Common questions about Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks
Brute force attacks
DDoS attacks
Server resource exhaustion
Security vulnerabilities
If you don't use WordPress mobile apps, Jetpack, or remote publishing tools, it's recommended to disable XML-RPC for better security.
Will this plugin break my site?
No, this plugin safely disables XML-RPC using WordPress's native filter. However, it may affect:
WordPress mobile apps
Jetpack functionality
Pingbacks and trackbacks
Third-party services using XML-RPC API
Test after activation to ensure your required features still work.
How do I know if XML-RPC is successfully disabled?
There are several ways to verify:
Method 1: WordPress Mobile App
Try connecting with the official WordPress mobile app. You should see: "XML-RPC services are disabled on this site"
Method 2: Online Validator
Use the XML-RPC Validator tool. When properly disabled, it will show an error message.
You should receive a response indicating XML-RPC is disabled.
Does this plugin improve website performance?
Yes! When XML-RPC is disabled, your server doesn't need to process XML-RPC requests, which can:
Reduce server load
Prevent resource exhaustion
Speed up response times
Save bandwidth
DDoS attacks
Server resource exhaustion
Security vulnerabilities
If you don't use WordPress mobile apps, Jetpack, or remote publishing tools, it's recommended to disable XML-RPC for better security.
Will this plugin break my site?
No, this plugin safely disables XML-RPC using WordPress's native filter. However, it may affect:
WordPress mobile apps
Jetpack functionality
Pingbacks and trackbacks
Third-party services using XML-RPC API
Test after activation to ensure your required features still work.
How do I know if XML-RPC is successfully disabled?
There are several ways to verify:
Method 1: WordPress Mobile App
Try connecting with the official WordPress mobile app. You should see: "XML-RPC services are disabled on this site"
Method 2: Online Validator
Use the XML-RPC Validator tool. When properly disabled, it will show an error message.
You should receive a response indicating XML-RPC is disabled.
Does this plugin improve website performance?
Yes! When XML-RPC is disabled, your server doesn't need to process XML-RPC requests, which can:
Reduce server load
Prevent resource exhaustion
Speed up response times
Save bandwidth
Wordfence Security
Sucuri Security
iThemes Security
All In One WP Security
And more!
What's the difference between disabling via .htaccess vs this plugin?
Plugin Method (Recommended):
* Uses WordPress native filters
* Easier to manage
* No server configuration needed
* Can be toggled on/off easily
* Won't cause server errors
.htaccess Method:
* Requires manual file editing
* Can break if edited incorrectly
* Harder to reverse
* May cause conflicts
Can I re-enable XML-RPC if needed?
Absolutely! Just go to Settings > Disable XML-RPC and toggle the switch off. Changes take effect immediately.
Does this work on WordPress multisite?
Yes, the plugin works on both single WordPress installations and multisite networks. On multisite, it must be configured per-site.
Will this plugin be updated regularly?
Yes! We actively maintain this plugin and test it with every new WordPress release. Updates are pushed regularly to ensure compatibility and security.
Where can I get support?
WordPress.org Support Forum
GitHub Issues
Plugin Documentation
Sucuri Security
iThemes Security
All In One WP Security
And more!
What's the difference between disabling via .htaccess vs this plugin?
Plugin Method (Recommended):
* Uses WordPress native filters
* Easier to manage
* No server configuration needed
* Can be toggled on/off easily
* Won't cause server errors
.htaccess Method:
* Requires manual file editing
* Can break if edited incorrectly
* Harder to reverse
* May cause conflicts
Can I re-enable XML-RPC if needed?
Absolutely! Just go to Settings > Disable XML-RPC and toggle the switch off. Changes take effect immediately.
Does this work on WordPress multisite?
Yes, the plugin works on both single WordPress installations and multisite networks. On multisite, it must be configured per-site.
Will this plugin be updated regularly?
Yes! We actively maintain this plugin and test it with every new WordPress release. Updates are pushed regularly to ensure compatibility and security.
Where can I get support?
WordPress.org Support Forum
GitHub Issues
Plugin Documentation
Submit bug reports on GitHub
Create pull requests with improvements
Translate the plugin into your language
Leave a review and rating
Suggest new features
Create pull requests with improvements
Translate the plugin into your language
Leave a review and rating
Suggest new features