Disable XML-RPC
v1.0.1by Phil Erb · updated 5 months ago
Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.
- Rank
- #263
- No change0 vs yesterday
- Active installs (est.)
- ≈ 230,000
- 200K+ reported · Low
- Total downloads
- 674.2K
- 674,222 all-time
- Rating
- 4.1/5
- 34 reviews
- Support resolved
- –
- 0 of 0 threads, last 2 months
Disable XML-RPC at a glance
Disable XML-RPC is a WordPress plugin by Phil Erb with 200K+ active installs, the #263 most popular plugin on WordPress.org. On a typical day it’s downloaded about 240 times, 14% more than the month before. It’s rated 4.1 out of 5 from 34 reviews. Version 1.0.1 came out on May 27, 2026 and is tested up to WordPress 7.0.8. It leads the 57 plugins tagged “xmlrpc”. It was first released in 2012.
Chart time range
Applies to every chart below. History from Oct 10, 2026, 30 days.
Downloads over time
Download stats6K downloads · the last 30 days
View as table
| Date | Disable XML-RPC |
|---|---|
| Nov 2, 2026 | 430 |
| Nov 1, 2026 | 233 |
| Oct 31, 2026 | 124 |
| Oct 30, 2026 | 214 |
| Oct 29, 2026 | 220 |
| Oct 28, 2026 | 247 |
| Oct 27, 2026 | 218 |
| Oct 26, 2026 | 299 |
| Oct 25, 2026 | 192 |
| Oct 24, 2026 | 160 |
| Oct 23, 2026 | 376 |
| Oct 22, 2026 | 506 |
| Oct 21, 2026 | 369 |
| Oct 20, 2026 | 689 |
| Oct 19, 2026 | 217 |
| Oct 18, 2026 | 105 |
| Oct 17, 2026 | 139 |
| Oct 16, 2026 | 214 |
| Oct 15, 2026 | 176 |
| Oct 14, 2026 | 189 |
| Oct 13, 2026 | 207 |
| Oct 12, 2026 | 229 |
| Oct 11, 2026 | 118 |
| Oct 10, 2026 | 145 |
Unusual spikes are usually updates, not new installs.
Estimated installs
≈ 225,122 · -0.4% in the last 30 days
View as table
| Date | Estimated installs |
|---|---|
| Nov 9, 2026 | 225,122 |
| Nov 8, 2026 | 224,718 |
| Nov 7, 2026 | 224,554 |
| Nov 5, 2026 | 224,546 |
| Nov 4, 2026 | 224,547 |
| Nov 3, 2026 | 224,247 |
| Nov 2, 2026 | 224,217 |
| Nov 1, 2026 | 224,936 |
| Oct 31, 2026 | 225,621 |
| Oct 30, 2026 | 225,656 |
| Oct 29, 2026 | 225,785 |
| Oct 28, 2026 | 225,984 |
| Oct 27, 2026 | 226,013 |
Rank over time
#263 · down 2 in the last 30 days
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | #263 |
| Nov 8, 2026 | #263 |
| Nov 7, 2026 | #263 |
| Nov 6, 2026 | #263 |
| Nov 5, 2026 | #263 |
| Nov 4, 2026 | #263 |
| Nov 3, 2026 | #263 |
| Nov 2, 2026 | #263 |
| Nov 1, 2026 | #263 |
| Oct 31, 2026 | #262 |
| Oct 30, 2026 | #262 |
| Oct 29, 2026 | #262 |
| Oct 28, 2026 | #262 |
| Oct 27, 2026 | #262 |
| Oct 16, 2026 | #261 |
Growth %
Average -0.03% a day in the last 30 days
View as table
| Date | Growth |
|---|---|
| Nov 9, 2026 | +0.18% |
| Nov 8, 2026 | +0.07% |
| Nov 7, 2026 | +0.00% |
| Nov 5, 2026 | 0.00% |
| Nov 4, 2026 | +0.13% |
| Nov 3, 2026 | +0.01% |
| Nov 2, 2026 | -0.32% |
| Nov 1, 2026 | -0.30% |
| Oct 31, 2026 | -0.02% |
| Oct 30, 2026 | -0.06% |
| Oct 29, 2026 | -0.09% |
| Oct 28, 2026 | -0.01% |
Active installs band
200K+ on WordPress.org
View as table
| Date | Daily snapshot |
|---|---|
| Nov 9, 2026 | 200K+ |
| Nov 8, 2026 | 200K+ |
| Nov 7, 2026 | 200K+ |
| Nov 6, 2026 | 200K+ |
| Nov 5, 2026 | 200K+ |
| Nov 4, 2026 | 200K+ |
| Nov 3, 2026 | 200K+ |
| Nov 2, 2026 | 200K+ |
| Nov 1, 2026 | 200K+ |
| Oct 31, 2026 | 200K+ |
| Oct 30, 2026 | 200K+ |
| Oct 29, 2026 | 200K+ |
| Oct 28, 2026 | 200K+ |
| Oct 27, 2026 | 200K+ |
| Oct 16, 2026 | 200K+ |
Search rankings
Where it appears in WordPress.org search for the searches you track, checked every day.
See where Disable XML-RPC ranks in search
Track this plugin to check its position for the searches you choose, daily, with an alert when it moves.
Change log
From our daily snapshot of WordPress.org- Rank #262 → #263
- Tested up to 7.0.7 → 7.0.8
Versions in use
Share of active installs on each published version, from WordPress.org.
- v1.0100%
Rating trend
4.1★★★★★34 reviews · steady in the last 30 days
Requirements & info
Version history- Version
- 1.0.1
- Requires WordPress
- 3.5
- Tested up to
- 7.0.8
- Requires PHP
- –
- First released
- Sep 28, 2012
- Last updated
- May 27, 2026
- Releases, last 12 months
- …
Questions about Disable XML-RPC
How many websites use Disable XML-RPC?
Disable XML-RPC is active on 200K+ WordPress sites, as WordPress.org reports it. WordPress.org rounds the number down, so the real count is somewhat higher. That makes it the #263 most popular plugin on WordPress.org.
How many times has Disable XML-RPC been downloaded?
674,222 times in total since 2012. On a typical day it’s downloaded about 240 times. See download stats
When was Disable XML-RPC last updated?
Version 1.0.1 came out on May 27, 2026 (5 months ago). See every release
Is Disable XML-RPC compatible with the latest WordPress?
It’s tested up to WordPress 7.0.8, one version behind the current 7.1. Authors often update this line a few weeks after a release.
Does Disable XML-RPC have known security vulnerabilities?
No. WPVulnerability’s database lists no known vulnerabilities for Disable XML-RPC. See its security record
Is Disable XML-RPC still maintained?
Yes. Its last release was 5 months ago. No support threads were opened in the last two months.
What rating does Disable XML-RPC have?
4.1 out of 5 from 34 reviews on WordPress.org. 76% of them give 5 stars.
What are the best alternatives to Disable XML-RPC?
The plugins most like Disable XML-RPC, by the tags they share, are Stop XML-RPC Attacks (5K+), Rename XMLRPC (1K+) and Remove XML-RPC Methods (1K+). Compare all alternatives
Latest reviews
Analyze reviewsReview stats
4.1
★★★★★
34 reviews
- 5 stars: 26 reviews, 76%
- 4 stars: 0 reviews, 0%
- 3 stars: 0 reviews, 0%
- 2 stars: 1 reviews, 3%
- 1 stars: 7 reviews, 21%
- Positive
- 76%4–5★
- Mixed
- 0%3★
- Critical
- 24%1–2★
- About 3 more 5★ reviews would lift it to 4.2.
- Each new 1★ review takes 3 five-star reviews to balance out.
Compare with competitors
Add up to 1 competitor. No account needed.
| Metric | |
|---|---|
| Estimated installs | ≈ 230,000 |
| Reported installs | 200K+ |
| Rating | 4.1 |
| Reviews | 34 |
| Total downloads | 674.2K |
| Author | Phil Erb |
| First released | Sep 28, 2012 |
| Version | 1.0.1 |
| Requires WP | 3.5 |
| Requires PHP | – |
| Last updated | May 27, 2026 |
Alternatives to Disable XML-RPC
Compare all alternativesPopular plugins with the same tags, the most in common first.
Stop XML-RPC Attacks
by Pascal CESCATO
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
- Rank
- #2,920
- Installs
- 5K+
- 5.0
Rename XMLRPC
by Jorge Bernal
Make XML-RPC work if you rename the file. Some hosts block access to xmlrpc.php file making it impossible to use
- Rank
- #5,986
- Installs
- 1K+
- 4.3
Remove XML-RPC Methods
by Walter Ebert
Remove all WordPress methods from the XML-RPC API to increase security.
- Rank
- #5,314
- Installs
- 1K+
- 5.0
REST XML-RPC Data Checker
by Enrico Sorcinelli
REST XML-RPC Data Checker allow to check JSON REST and XML-RPC API requests and grant access permissions.
- Rank
- #7,358
- Installs
- 800+
- 5.0
Eazy XMLRPC Pingback Disable
by Rob Scott
This plugin disables the WordPress XMLRPC pingback ping.
- Rank
- #7,824
- Installs
- 700+
- 5.0
Control XML-RPC publishing
by Mark-k
Control remote publishing with XML-RPC from the writing settings page.
- Rank
- #9,712
- Installs
- 400+
- 5.0
Side by side:Disable XML-RPC vs Stop XML-RPC AttacksDisable XML-RPC vs Rename XMLRPCDisable XML-RPC vs Remove XML-RPC Methods