by Pascal CESCATO 5 (4 reviews)

Stop XML-RPC Attacks

Name: Stop XML-RPC Attacks
Rating: 5.0 (4 reviews)
Author: Pascal CESCATO

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Stop XML-RPC Attacks ranks #2,919 among WordPress.org plugins with 6,000+ active installations, is #111 of 2,958 in the Discussion & Community category, a 5/5 rating from 4 reviews, and was last updated Aug 27, 2026. Data from WordPress.org, refreshed twice daily — see methodology.

Compatible with WP 7.1

v2.0.0 Current Version v2.0.0

Updated 2 months ago Last Update on 27 Aug, 2026

Refreshed 2 days ago Last Refreshed on

#111 of 2,958 in Discussion & Community Top 5% by installs Downloads -33.6% this week

View on WordPress.org

Rank

#2,919

— No change

Active Installs

6K+

-4.9%

KW Avg Position

— No change

Downloads

27K

+4 today

Support Resolved

— No change

Rating

100%

Review 5 out of 5

5 (4 reviews)

Next Milestone 7K

Total Progress 28.7%

6K+ 7K+

379

Ranks to Climb

Growth Needed

8,000,000

Active Installs

Pro

Unlock Exact Install Count

See the precise estimated active installs for this plugin, calculated from real-time ranking data.

Exact install estimates within tiers
Track install growth over time
Milestone progress predictions

Upgrade to Pro

Need 713 more installs to reach 7K+

Rank Changes

Current #2,919

Change

Best #

Upgrade to Pro

Unlock 30-day and 90-day rank history charts with a Pro subscription.

Upgrade Now

Active Installs Growth

Upgrade to Pro

Active Installs 0,000,000+

Growth +0.0%

Peak 0,000,000

Downloads Growth

Downloads

Growth

Peak

Upgrade to Pro

Unlock 30-day, 90-day, and yearly download history charts with a Pro subscription.

Upgrade Now

Reviews & Ratings

5.0

4 reviews

Overall 100%

4 (100%)

0 (0%)

Security History

Source: WPVulnerability

No known vulnerabilities on record for Stop XML-RPC Attacks. Checked 1 month ago.

Track This Plugin

Get detailed analytics, keyword tracking, and position alerts delivered to your inbox.

Start Tracking Free

Plugin Details

Version: 2.0.0
Last Updated: Aug 27, 2026
Requires WP: 6.0+
Tested Up To: 7.1
PHP Version: 7.4 or higher
Author: Pascal CESCATO

Support & Rating

Rating: ★ ★ ★ ★ ★ 5
Reviews: 4
Support Threads: 0
Resolved: 0%

Keywords

Brute Force ddos jetpack security xmlrpc

Upgrade to Pro

Unlock keyword rankings, search positions, and detailed analytics with a Pro subscription.

Upgrade Now

Similar Plugins

Adminify – White Label, Admin Menu Editor, Login Customizer

6K+ installs

#2,757

Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder, Popup Builder, Widget Builder & Template Kits

30K+ installs

#1,015

Akismet Anti-spam: Spam Protection

5M+ installs

WPForms – AI Form Builder for WordPress – Contact Forms, Payment Forms, Survey Form, Quiz & More

5M+ installs

Jetpack – AI Agents & MCP, Security, Backup & Analytics

WP-Optimize – Cache, Compress images, Minify & Clean database to boost page speed & performance

View all Discussion-and-community plugins

TL;DR

AI summary of the plugin's readme

This plugin is for WordPress site owners and administrators who use Jetpack, WooCommerce, or mobile apps and want to keep XML-RPC functionality intact. It blocks dangerous XML-RPC methods to stop brute force attacks, DDoS attempts, and reconnaissance probes without breaking those integrations.

Three security modes available
Blocks system.multicall method
Blocks pingback.ping method
Compatible with Jetpack
Compatible with WooCommerce
Optional user enumeration blocking
Attack logging for monitoring
Zero configuration required

Frequently Asked Questions

Common questions about Stop XML-RPC Attacks

No! The default "Selective Blocking" mode is fully compatible with Jetpack and WooCommerce.

Full Disable: Maximum security, disables XML-RPC completely Guest Disable: Balanced approach, only allows XML-RPC for logged-in users Selective Blocking: Best compatibility, only blocks dangerous methods

Go to Settings > XML-RPC Security and check "Enable Attack Logging". Logs will be written to your debug.log file when WP_DEBUG is enabled.