Simple Disable XML-RPCv1.4.1
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
Alternatives to AB WP Security
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
MSC Stealth Loginv1.3.2
Hide wp-login.php behind a custom login URL and stop brute-force attacks — lockouts, IP allowlist, login history, email alerts. No tracking.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
EnumGuardv1.0.0
Stops WordPress user enumeration through author URLs, REST, login errors, XML-RPC, sitemaps, and oEmbed.
Version Cloakv1.0.4
Hide or decoy plugin, theme and core versions from scanners. Neutralize XML-RPC and lock down WP-Cron.
Disable XML-RPC-APIv2.1.7
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Prunekitv1.0.2
Switch off the parts of WordPress you don't use. Safe defaults, one-click recommended settings, nothing changes until you turn it on.
Fixora Disable XML-RPCv1.0.1
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
Remove XML-RPC Methodsv1.4.2
Remove all WordPress methods from the XML-RPC API to increase security.