Simple Disable XML-RPCv1.4.1
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
Alternatives to Remove XML-RPC Pingback
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Fixora Disable XML-RPCv1.0.1
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
Disable XML-RPC-APIv2.1.7
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Lightweight, high-performance security suite. Protects from brute-force logins, DDoS pingbacks, bad request injections, and manages CSP headers.
Remove XML-RPC Methodsv1.4.2
Remove all WordPress methods from the XML-RPC API to increase security.
No Nonsensev3.6.6
The fastest, cleanest way to get rid of the parts of WordPress you don't need.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
Prunekitv1.0.2
Switch off the parts of WordPress you don't use. Safe defaults, one-click recommended settings, nothing changes until you turn it on.
Detects internal links in posts and automatically inserts a pingback-style comment on each linked post. No XML-RPC required.