Simple Disable XML-RPCv1.4.1
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
Alternatives to Control XML-RPC publishing
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Remove XML-RPC Methodsv1.4.2
Remove all WordPress methods from the XML-RPC API to increase security.
Modern role editor, multiple roles, content control and smart role rules for WordPress.
Quickly toggle XML-RPC on/off from your dashboard. Perfect for temporarily enabling access for mobile apps, then securing your site again.
Stop XML-RPC Attacksv2.0.0
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
WT Hardeningv1.0.7
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Selective maintenance and service-status control for WordPress. Keep unaffected parts online with up to three independent Service Zones.
Check plugin compatibility and repository health, track updates, roll back WordPress.org plugins, and download installed versions as ZIP files.
Authyo Passwordless Loginv1.0.11
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
Poke Monitorv1.0.0
See who is poking your site: Cloudflare bypasses, secret-file scans, backdoor access, XML-RPC abuse and scanner user agents.