Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
Alternatives to w3v-xml-rpc-security
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Remove all WordPress methods from the XML-RPC API to increase security.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
Lightweight, modular client-site tools for agencies: security hardening, admin clean-up, notifications and maintenance settings.
Practical WordPress hardening with configurable security headers, CSP modes, login rate limiting, XML-RPC controls, and version hiding.
Stops WordPress user enumeration through author URLs, REST, login errors, XML-RPC, sitemaps, and oEmbed.