Stop XML-RPC Attacks
by Pascal CESCATO 5 (4 reviews)

Stop XML-RPC Attacks

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Stop XML-RPC Attacks ranks #2,958 among WordPress.org plugins with 6,000+ active installations, is #112 of 2,881 in the Discussion & Community category, a 5/5 rating from 4 reviews, and was last updated Aug 27, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1
v2.0.0 Current Version v2.0.0
Updated 2 weeks ago Last Update on 27 Aug, 2026
Refreshed 8 hours ago Last Refreshed on
#112 of 2,881 in Discussion & Community Top 5% by installs Downloads -7.6% this week Actively maintained
View on WordPress.org
Rank
#2,958
No change
Active Installs
6K+
-5.2%
KW Avg Position
16.5
No change
Downloads
27K
+12 today
Support Resolved
0%
No change
Rating
100%
Review 5 out of 5
5 (4 reviews)

Next Milestone 7K

Total Progress 31.8%
6K+ 7K+
244
Ranks to Climb
-
Growth Needed
8,000,000
Active Installs
Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

  • Exact install estimates within tiers
  • Track install growth over time
  • Milestone progress predictions
Upgrade to Pro
Need 682 more installs to reach 7K+

Rank Changes

2,807 2,882 2,957 3,031 3,106 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
2,806 2,882 2,958 3,034 3,110 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
Current #2,958
Change
Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Active Installs 0,000,000+
Growth +0.0%
Peak 0,000,000

Downloads Growth

0 10 20 30 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
0 10 20 30 01-09-2026 02-09-2026 03-09-2026 04-09-2026 05-09-2026 06-09-2026 07-09-2026 08-09-2026 09-09-2026 10-09-2026 11-09-2026 12-09-2026 13-09-2026 14-09-2026 15-09-2026 16-09-2026
Downloads
Growth
Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0
4 reviews
Overall 100%
5
4 (100%)
4
0 (0%)
3
0 (0%)
2
0 (0%)
1
0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Stop XML-RPC Attacks. Checked 2 days ago.

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners and administrators who use Jetpack, WooCommerce, or mobile apps and want to keep XML-RPC functionality intact. It blocks dangerous XML-RPC methods to stop brute force attacks, DDoS attempts, and reconnaissance probes without breaking those integrations.

  • Three security modes available
  • Blocks system.multicall method
  • Blocks pingback.ping method
  • Compatible with Jetpack
  • Compatible with WooCommerce
  • Optional user enumeration blocking
  • Attack logging for monitoring
  • Zero configuration required

Frequently Asked Questions

Common questions about Stop XML-RPC Attacks

No! The default "Selective Blocking" mode is fully compatible with Jetpack and WooCommerce.
Full Disable: Maximum security, disables XML-RPC completely Guest Disable: Balanced approach, only allows XML-RPC for logged-in users Selective Blocking: Best compatibility, only blocks dangerous methods
Go to Settings > XML-RPC Security and check "Enable Attack Logging". Logs will be written to your debug.log file when WP_DEBUG is enabled.

Sign In / Register

You need to sign in or register to use this feature.