Simple Disable XML-RPCv1.4.1
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
Alternatives to Disable XML RPC Fully
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Disable XML-RPCv1.0.1
Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.
Quickly toggle XML-RPC on/off from your dashboard. Perfect for temporarily enabling access for mobile apps, then securing your site again.
Disable XML-RPC-APIv2.1.7
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Authyo Passwordless Loginv1.0.11
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
Fixora Disable XML-RPCv1.0.1
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
RationalCleanupv1.1.2
Clean up legacy WordPress bloat, improve security, and optimize performance with toggleable, opinionated defaults.
Security Safev3.0.1
This security plugin helps you quickly audit, harden, and secure your WordPress website.
Disables the XMP-RPC API service introduced in WordPress 3.5 and above.
Poke Monitorv1.0.0
See who is poking your site: Cloudflare bypasses, secret-file scans, backdoor access, XML-RPC abuse and scanner user agents.