Best disable xmlrpc plugins for WordPress
The most popular disable xmlrpc plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Disable XML-RPC-API leads with 100K+ active installs, ahead of Security Safe (600+) and RationalCleanup (10+). All 5 plugins tagged “disable xmlrpc” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 5 disable xmlrpc plugins
- 1.
Disable XML-RPC-APIThe most installed disable xmlrpc plugin, with 100K+ active installs. Rated 4.2 from 43 reviews, updated 9 months ago. Tested only up to WordPress 6.9.11.
- 2.Security Safe
600+ active installs. Rated 5.0 from 13 reviews, updated 8 months ago. Tested only up to WordPress 6.9.11.
- 3.
RationalCleanup10+ active installs. No reviews yet, updated 2 months ago.
- 4.
Authyo Passwordless Login10+ active installs. No reviews yet, updated 1 month ago.
- 5.
Fixora Disable XML-RPCFewer than 10 active installs. No reviews yet, updated 1 month ago.
All 5 plugins tagged “disable xmlrpc”

Disable XML-RPC-API
#388by Amin Nazemi9 months ago
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
- Installs
- 100K+
- Rating
- 4.2(43)
- Downloads
- 269/day
Security Safe
Down in the last 7 days:14#8,109by Sovereign Stack, LLC8 months ago
This security plugin helps you quickly audit, harden, and secure your WordPress website.
- Installs
- 600+
- Rating
- 5.0(13)
- Downloads
- 11/day

RationalCleanup
Up in the last 7 days:614#33,755by rationalwp2 months ago
Clean up legacy WordPress bloat, improve security, and optimize performance with toggleable, opinionated defaults.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Authyo Passwordless Login
#45,604by Konceptwise Digital Media Pvt Ltd1 month ago
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Fixora Disable XML-RPC
#57,454by Fixora Labs1 month ago
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day