Best disable XML-rpc plugins for WordPress
The most popular disable XML-rpc plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Disable XML-RPC-API leads with 100K+ active installs, ahead of Simple Disable XML-RPC (1K+) and Senpai Software (10+). All 7 plugins tagged “disable xml-rpc” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 7 disable XML-rpc plugins
- 1.
Disable XML-RPC-APIThe most installed disable XML-rpc plugin, with 100K+ active installs. Rated 4.2 from 43 reviews, updated 9 months ago. Tested only up to WordPress 6.9.11.
- 2.
Simple Disable XML-RPC1K+ active installs. Rated 5.0 from 5 reviews, updated 1 week ago.
- 3.
Senpai Software10+ active installs. Only 3 reviews so far, last updated 3 years ago. Tested only up to WordPress 6.4.14.
- 4.
AB WP Security10+ active installs. No reviews yet, last updated 9 years ago. Tested only up to WordPress 4.8.34.
- 5.
DawsonyWeb Spam Protection and API HardeningFewer than 10 active installs. No reviews yet, updated 1 week ago.
- 6.
Fixora Disable XML-RPCFewer than 10 active installs. No reviews yet, updated 1 month ago.
- 7.
MSC Stealth LoginFewer than 10 active installs. No reviews yet, updated 2 months ago.
All 7 plugins tagged “disable xml-rpc”
Disable XML-RPC-API
#388by Amin Nazemi9 months ago
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
- Installs
- 100K+
- Rating
- 4.2(43)
- Downloads
- 269/day
Simple Disable XML-RPC
Up in the last 7 days:63#6,120by Delower Hossain12 days ago
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
- Installs
- 1K+
- Rating
- 5.0(5)
- Downloads
- 40/day
Senpai Software
Up in the last 7 days:705#42,224by Serhii Kolomiitsev3 years ago
Get strong protection against brute force attacks with unique two-factor authentication.
- Installs
- 10+
- Rating
- 5.0(3)
- Downloads
- 0/day
AB WP Security
#44,656by abjelosevic9 years ago
Security plugin that stops User Enumeration in WordPress, removes WordPress Version Number, disable directory browsing and Disable XML-RPC
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
DawsonyWeb Spam Protection and API Hardening
Down in the last 7 days:152#53,594by DawsonyWeb13 days ago
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
Fixora Disable XML-RPC
#57,454by Fixora Labs1 month ago
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day
MSC Stealth Login
Up in the last 7 days:12,087#58,851by djm562 months ago
Hide wp-login.php behind a custom login URL and stop brute-force attacks — lockouts, IP allowlist, login history, email alerts. No tracking.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day