Disable XML-RPC-APIv2.1.7
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Alternatives to Manage XML-RPC
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Detect PHP error spikes, recurring patterns, request impact and source-version changes with grouped local diagnostics.
Stop XML-RPC Attacksv2.0.0
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
Login Delay Shieldv2.7.0
Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.
WT Hardeningv1.0.7
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Khushal Login Path Guardv2.4.1
Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.
Authyo Passwordless Loginv1.0.11
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
WebDoktoru Securityv1.0.2
Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.
MSC Stealth Loginv1.3.2
Hide wp-login.php behind a custom login URL and stop brute-force attacks — lockouts, IP allowlist, login history, email alerts. No tracking.
Vortix Web Securityv2.2.0
Free, offline-first WordPress security hardening with 15 configurable protection modules and a 20-point local security scan.