Stop XML-RPC Attacks
v2.0.0by Pascal CESCATO · updated 2 months ago
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
- Rank
- #2,920
- Up2 vs yesterday
- Active installs (est.)
- ≈ 6,040
- 6K+ reported · High
- Total downloads
- 31.1K
- 31,128 all-time
- Rating
- 5.0/5
- 4 reviews
- Support resolved
- –
- 0 of 0 threads, last 2 months
Stop XML-RPC Attacks at a glance
Stop XML-RPC Attacks is a WordPress plugin by Pascal CESCATO with 6K+ active installs, the #2,920 most popular plugin on WordPress.org. On a typical day it’s downloaded about 26 times, 29% more than the month before. It’s rated 5.0 out of 5 from 4 reviews. Version 2.0.0 came out on Aug 27, 2026 and is tested up to WordPress 7.1.4. Among the 16 plugins tagged “ddos”, it ranks #3. It was first released in 2019.
Chart time range
Applies to every chart below. History from Oct 9, 2026, 31 days.
Downloads over time
Download stats588 downloads · the last 30 days
View as table
| Date | Stop XML-RPC Attacks |
|---|---|
| Nov 2, 2026 | 31 |
| Nov 1, 2026 | 25 |
| Oct 31, 2026 | 20 |
| Oct 30, 2026 | 19 |
| Oct 29, 2026 | 24 |
| Oct 28, 2026 | 25 |
| Oct 27, 2026 | 27 |
| Oct 26, 2026 | 29 |
| Oct 25, 2026 | 27 |
| Oct 24, 2026 | 22 |
| Oct 23, 2026 | 35 |
| Oct 22, 2026 | 48 |
| Oct 21, 2026 | 26 |
| Oct 20, 2026 | 19 |
| Oct 19, 2026 | 29 |
| Oct 18, 2026 | 17 |
| Oct 17, 2026 | 14 |
| Oct 16, 2026 | 19 |
| Oct 15, 2026 | 18 |
| Oct 14, 2026 | 16 |
| Oct 13, 2026 | 20 |
| Oct 12, 2026 | 18 |
| Oct 11, 2026 | 13 |
| Oct 10, 2026 | 19 |
| Oct 9, 2026 | 28 |
Unusual spikes are usually updates, not new installs.
Estimated installs
≈ 6,042 · -1.4% in the last 30 days
View as table
| Date | Estimated installs |
|---|---|
| Nov 8, 2026 | 6,042 |
| Nov 7, 2026 | 6,035 |
| Nov 5, 2026 | 5,688 |
| Nov 4, 2026 | 5,687 |
| Nov 3, 2026 | 5,687 |
| Nov 2, 2026 | 6,132 |
| Nov 1, 2026 | 6,129 |
| Oct 31, 2026 | 6,127 |
| Oct 30, 2026 | 6,125 |
| Oct 29, 2026 | 6,132 |
| Oct 28, 2026 | 6,125 |
| Oct 27, 2026 | 6,129 |
Rank over time
#2,920 · up 25 in the last 30 days
View as table
| Date | Daily snapshot |
|---|---|
| Nov 8, 2026 | #2,920 |
| Nov 7, 2026 | #2,922 |
| Nov 6, 2026 | #2,923 |
| Nov 5, 2026 | #2,926 |
| Nov 4, 2026 | #2,928 |
| Nov 3, 2026 | #2,924 |
| Nov 2, 2026 | #2,921 |
| Nov 1, 2026 | #2,921 |
| Oct 31, 2026 | #2,922 |
| Oct 30, 2026 | #2,924 |
| Oct 29, 2026 | #2,924 |
| Oct 28, 2026 | #2,936 |
| Oct 27, 2026 | #2,934 |
| Oct 16, 2026 | #2,945 |
Growth %
Average -0.12% a day in the last 30 days
View as table
| Date | Growth |
|---|---|
| Nov 8, 2026 | +0.12% |
| Nov 7, 2026 | +3.05% |
| Nov 5, 2026 | +0.02% |
| Nov 4, 2026 | 0.00% |
| Nov 3, 2026 | -7.26% |
| Nov 2, 2026 | +0.05% |
| Nov 1, 2026 | +0.03% |
| Oct 31, 2026 | +0.03% |
| Oct 30, 2026 | -0.11% |
| Oct 29, 2026 | +0.11% |
| Oct 28, 2026 | -0.07% |
Active installs band
6K+ on WordPress.org
View as table
| Date | Daily snapshot |
|---|---|
| Nov 8, 2026 | 6K+ |
| Nov 7, 2026 | 6K+ |
| Nov 6, 2026 | 6K+ |
| Nov 5, 2026 | 5K+ |
| Nov 4, 2026 | 5K+ |
| Nov 3, 2026 | 5K+ |
| Nov 2, 2026 | 6K+ |
| Nov 1, 2026 | 6K+ |
| Oct 31, 2026 | 6K+ |
| Oct 30, 2026 | 6K+ |
| Oct 29, 2026 | 6K+ |
| Oct 28, 2026 | 6K+ |
| Oct 27, 2026 | 6K+ |
| Oct 16, 2026 | 6K+ |
Search rankings
Where it appears in WordPress.org search for the searches you track, checked every day.
See where Stop XML-RPC Attacks ranks in search
Track this plugin to check its position for the searches you choose, daily, with an alert when it moves.
Change log
From our daily snapshot of WordPress.org- Rank #2936 → #2926Installs 6K+ → 5K+
- Tested up to 7.1.3 → 7.1.4
Versions in use
Share of active installs on each published version, from WordPress.org.
- v2.081%
- v1.019%
Rating trend
5.0★★★★★4 reviews · steady in the last 30 days
Requirements & info
Version history- Version
- 2.0.0
- Requires WordPress
- 6.0
- Tested up to
- 7.1.4
- Requires PHP
- 7.4
- First released
- Apr 26, 2019
- Last updated
- Aug 27, 2026
- Releases, last 12 months
- …
Questions about Stop XML-RPC Attacks
How many websites use Stop XML-RPC Attacks?
Stop XML-RPC Attacks is active on 6K+ WordPress sites, as WordPress.org reports it. WordPress.org rounds the number down, so the real count is somewhat higher. That makes it the #2,920 most popular plugin on WordPress.org.
How many times has Stop XML-RPC Attacks been downloaded?
31,128 times in total since 2019. On a typical day it’s downloaded about 26 times. See download stats
When was Stop XML-RPC Attacks last updated?
Version 2.0.0 came out on Aug 27, 2026 (2 months ago). See every release
Is Stop XML-RPC Attacks compatible with the latest WordPress?
Yes. It’s tested up to WordPress 7.1.4, the current version.
Does Stop XML-RPC Attacks have known security vulnerabilities?
No. WPVulnerability’s database lists no known vulnerabilities for Stop XML-RPC Attacks. See its security record
Is Stop XML-RPC Attacks still maintained?
Yes. Its last release was 2 months ago. No support threads were opened in the last two months.
What rating does Stop XML-RPC Attacks have?
5.0 out of 5 from 4 reviews on WordPress.org.
What are the best alternatives to Stop XML-RPC Attacks?
The plugins most like Stop XML-RPC Attacks, by the tags they share, are Jetpack Protect (100K+), Jetpack (3M+) and Disable XML-RPC (200K+). Compare all alternatives
Latest reviews
Analyze reviewsReview stats
5.0
★★★★★
4 reviews
- 5 stars: 4 reviews, 100%
- 4 stars: 0 reviews, 0%
- 3 stars: 0 reviews, 0%
- 2 stars: 0 reviews, 0%
- 1 stars: 0 reviews, 0%
- Positive
- 100%4–5★
- Mixed
- 0%3★
- Critical
- 0%1–2★
Compare with competitors
Add up to 1 competitor. No account needed.
| Metric | |
|---|---|
| Estimated installs | ≈ 6,040 |
| Reported installs | 6K+ |
| Rating | 5.0 |
| Reviews | 4 |
| Total downloads | 31.1K |
| Author | Pascal CESCATO |
| First released | Apr 26, 2019 |
| Version | 2.0.0 |
| Requires WP | 6.0 |
| Requires PHP | 7.4 |
| Last updated | Aug 27, 2026 |
Alternatives to Stop XML-RPC Attacks
Compare all alternativesPopular plugins with the same tags, the most in common first.
Jetpack Protect
by Automattic
Free daily vulnerability scans & WordPress security, powered by WPScan (an Automattic brand) and its 60,000+ vulnerability database. No setup needed!
- Rank
- #356
- Installs
- 100K+
- 4.6
Jetpack
by Automattic
Connect ChatGPT, Claude, or another AI agent to your site. Plus backup, malware scan, firewall, stats, CDN, and SEO tools in one plugin.
- Rank
- #17
- Installs
- 3M+
- 3.7
Disable XML-RPC
by Phil Erb
Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.
- Rank
- #263
- Installs
- 200K+
- 4.1
Disable XML-RPC-API
by Amin Nazemi
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
- Rank
- #388
- Installs
- 100K+
- 4.2
Stop User Enumeration
by fullworks
Helps secure your site against hacking attacks through detecting User Enumeration
- Rank
- #671
- Installs
- 60K+
- 4.9
Disable XML-RPC Pingback
by Samuel Aguilera
Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
- Rank
- #666
- Installs
- 60K+
- 3.9
Side by side:Stop XML-RPC Attacks vs Jetpack ProtectStop XML-RPC Attacks vs JetpackStop XML-RPC Attacks vs Disable XML-RPC
More by Pascal CESCATO
See everything by Pascal CESCATOOther plugins from this author in our catalog.
CSP Friendly Security
by Pascal CESCATO
Adds a CSP header compatible with most WP plugins without breaking styles.
- Rank
- #11,702
- Installs
- 200+
- 3.5
Newsletter Optin Block
by Pascal CESCATO
Automatically injects a Contact Form 7 form into posts and syncs subscribers with a Mailjet list.
- Rank
- #59,897
- Installs
- Fewer than 10