Best ddos plugins for WordPress
The most popular ddos plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Cloudflare leads with 200K+ active installs, ahead of Disable XML-RPC Pingback (60K+) and Stop XML-RPC Attacks (6K+). All 16 plugins tagged “ddos” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 ddos plugins
- 1.
CloudflareThe most installed ddos plugin, with 200K+ active installs. Rated 3.5 from 181 reviews, updated 1 month ago.
- 2.
Disable XML-RPC Pingback60K+ active installs. Rated 3.9 from 14 reviews, updated 11 months ago. Tested only up to WordPress 6.8.12.
- 3.
Stop XML-RPC Attacks6K+ active installs. Only 4 reviews so far, updated 2 months ago.
- 4.
Protection Against DDoS3K+ active installs. Only 4 reviews so far, last updated 6 years ago. Tested only up to WordPress 5.4.25.
- 5.
Eazy XMLRPC Pingback Disable700+ active installs. Only 4 reviews so far, last updated 8 years ago. Tested only up to WordPress 4.9.35.
- 6.
Deactivate XML-RPC on WordPress200+ active installs. No reviews yet, last updated 11 years ago. Tested only up to WordPress 4.2.39.
- 7.
Turbo Rate Limiter60+ active installs. No reviews yet, updated 7 months ago. Tested only up to WordPress 6.9.11.
- 8.
Rate Limit Guard50+ active installs. Only 2 reviews so far, last updated 1 year ago. Tested only up to WordPress 6.7.11.
- 9.
Login Dongle40+ active installs. Only 2 reviews so far, last updated 12 years ago. Tested only up to WordPress 4.0.38.
- 10.
XML-RPC Settings30+ active installs. No reviews yet, last updated 4 years ago. Tested only up to WordPress 5.8.19.
All 16 plugins tagged “ddos”
Cloudflare
Up in the last 7 days:1#226by Cloudflare1 month ago
All of Cloudflare’s performance and security benefits in a simple one-click install.
- Installs
- 200K+
- Rating
- 3.5(181)
- Downloads
- 2.8K/day
Disable XML-RPC Pingback
Up in the last 7 days:1#666by Samuel Aguilera11 months ago
Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
- Installs
- 60K+
- Rating
- 3.9(14)
- Downloads
- 82/day
Stop XML-RPC Attacks
Up in the last 7 days:1#2,920by Pascal CESCATO2 months ago
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
- Installs
- 6K+
- Rating
- 5.0(4)
- Downloads
- 24/day
Protection Against DDoS
Down in the last 7 days:7#4,019by WPChef6 years ago
Protects your login, xmlrpc and RSS feeds pages against DDoS attacks. Denies access to your site from certain countries via CloudFlare.
- Installs
- 3K+
- Rating
- 5.0(4)
- Downloads
- 13/day
Eazy XMLRPC Pingback Disable
Down in the last 7 days:3#7,819by Rob Scott8 years ago
This plugin disables the WordPress XMLRPC pingback ping.
- Installs
- 700+
- Rating
- 5.0(4)
- Downloads
- 11/day
Deactivate XML-RPC on WordPress
Down in the last 7 days:19#12,476by tildemark11 years ago
This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …
- Installs
- 200+
- Rating
- –
- Downloads
- 0/day
Turbo Rate Limiter
Down in the last 7 days:106#19,683by ahriad7 months ago
Protect your WordPress site from brute force attacks, API abuse, and DDoS attacks with customizable rate limiting rules.
- Installs
- 60+
- Rating
- –
- Downloads
- 0/day
Rate Limit Guard
Up in the last 7 days:117#20,118by IP Stresser Guard1 year ago
This plugin safeguards your website from Layer 7 DDoS attacks and IP stressors by utilizing a rate limiting feature.
- Installs
- 50+
- Rating
- 3.0(2)
- Downloads
- 0/day
Login Dongle
Down in the last 7 days:119#21,515by Andrea Ercolino12 years ago
The bookmark to login nobody but you. Simple and secure.
- Installs
- 40+
- Rating
- 4.5(2)
- Downloads
- 0/day
XML-RPC Settings
Down in the last 7 days:12#25,020by vavkamil5 years ago
Secure your website with the most comprehensive XML-RPC Settings plugin.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day
Simple XML-RPC Disabler
Down in the last 7 days:803#29,022by Vikash Chand5 years ago
This plugin completely disables the XML-RPC API which can be abused by hackers on a WordPress site, providing an easy and simple way to disable/enable …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Anti DDOS/BOT reCAPTCHA Protection
Down in the last 7 days:817#31,254by Pantelis Kaplanoglou4 months ago
Stop bad bots and limit DDOS attacks with Google reCAPTCHA. One-time human verification keeps automated traffic away. Translated in 132 languages.
- Installs
- 10+
- Rating
- –
- Downloads
- 3/day
Simple XML-RPC Pingback Disabler
Up in the last 7 days:9,597#36,109by Vikash Chand5 years ago
This plugin simply disables only the XML-RPC API Pingback Methods used by hackers on a WordPress site, providing an easy and simple way to disable/ena …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
MAT Firewall
Up in the last 7 days:601#44,349by matpluginsofficial1 year ago
MAT Firewall is a powerful WordPress security plugin that helps protect your website from malicious attacks, brute force attempts, and unauthorized ac …
- Installs
- 10+
- Rating
- 5.0(1)
- Downloads
- 0/day
WP Custom My Password
#45,446by suifengtec12 years ago
Your user can custom his own password on the registration screen with me.
- Installs
- 10+
- Rating
- –
- Downloads
- 1/day
VisitorLog
#66,111by IT Augustine11 months ago
The VisitorLog plugin adds useful functionality to your site in the field of security, statistics and some other useful functions.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day