Disable XML-RPC-APIv2.1.7
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Alternatives to Simple Disable XML-RPC
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Fixora Disable XML-RPCv1.0.1
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
MSC Stealth Loginv1.3.2
Hide wp-login.php behind a custom login URL and stop brute-force attacks — lockouts, IP allowlist, login history, email alerts. No tracking.
Authyo Passwordless Loginv1.0.11
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
Prunekitv1.0.2
Switch off the parts of WordPress you don't use. Safe defaults, one-click recommended settings, nothing changes until you turn it on.
Security Safev3.0.1
This security plugin helps you quickly audit, harden, and secure your WordPress website.
Remove XML-RPC Methodsv1.4.2
Remove all WordPress methods from the XML-RPC API to increase security.
RationalCleanupv1.1.2
Clean up legacy WordPress bloat, improve security, and optimize performance with toggleable, opinionated defaults.