A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Alternatives to Remove & Disable XML-RPC Pingback
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
A very lightweight plugin to add core functionality that every WordPress install needs.
Remove all WordPress methods from the XML-RPC API to increase security.
A lightweight WordPress optimization plugin for disabling selected default frontend and header outputs such as emojis, shortlinks, embeds, XML-RPC, se …
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
Clean up legacy WordPress bloat, improve security, and optimize performance with toggleable, opinionated defaults.
Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.
Quickly toggle XML-RPC on/off from your dashboard. Perfect for temporarily enabling access for mobile apps, then securing your site again.