Best XML-rpc plugins for WordPress

Disable XML-RPC Pingback

#668

by Samuel Aguilera11 months ago

Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.

Remove & Disable XML-RPC Pingback

Down in the last 7 days:3#2,542

by cleverplugins3 years ago

Prevent pingback, XML-RPC and denial of service DDOS attacks by disabling the XML-RPC pingback functionality.

Avatar Manager

Down in the last 7 days:9#3,183

by Cătălin Dogaru5 years ago

Avatar Manager for WordPress is a sweet and simple plugin for storing avatars locally and more. Easily.

Remove XML-RPC Methods

Up in the last 7 days:7#5,314

by Walter Ebert2 months ago

Remove all WordPress methods from the XML-RPC API to increase security.

Control XML-RPC publishing

Down in the last 7 days:30#9,712

by Mark-k11 years ago

Control remote publishing with XML-RPC from the writing settings page.

LibXML2 Fix

Down in the last 7 days:12#11,785

by Joseph Scott15 years ago

Work around for some versions of libxml2 2.7.x that strip out brackets when parsing XML. This plugin fixes XML-RPC requests that are mangled because …

Deactivate XML-RPC on WordPress

Up in the last 7 days:12#12,455

by tildemark11 years ago

This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …

Deactivate XML-RPC Service

Down in the last 7 days:19#13,495

by DeveloperWil2 months ago

Disables the XMP-RPC API service introduced in WordPress 3.5 and above.

Agency Toolkit

Up in the last 7 days:83#14,199

by inspry13 days ago

Lightweight, modular client-site tools for agencies: security hardening, admin clean-up, notifications and maintenance settings.

TrimPress

Down in the last 7 days:97#16,189

by David Matthew1 year ago

TrimPress optimizes and trims some of the cruft from WordPress for a lighter, more secure theme!

XML-RPC Modernization

Up in the last 7 days:1#17,946

by Max Cutler14 years ago

This plugin updates the WordPress XML-RPC API to leverage the latest features of WordPress and move beyond the historical Blogger/metaWeblog/MT APIs.

SlimPress

Up in the last 7 days:953#19,906

by Mac29 days ago

Switch off WordPress core features you do not use. Every toggle explains what it might affect, including any compatibility concerns.

EnumGuard

Up in the last 7 days:697#24,281

by Alex Hedström1 month ago

Stops WordPress user enumeration through author URLs, REST, login errors, XML-RPC, sitemaps, and oEmbed.

Don Security

Down in the last 7 days:196#26,093

by Rodrigo Donini9 years ago

This plugin allows to set some security improvements to your WordPress site. Blocking attempts of scan from WPScan and other similar tools.

XML-RPC De-whitespacer

#28,090

by Max Cutler14 years ago

Removes leading and trailing whitespace from XML-RPC responses that can break some XML-RPC clients.

Plugin Name

Up in the last 7 days:402#28,997

by YUKI OKAMOTO13 years ago

This plugin allow CORS(Cross-Origin Resource Sharing) for XML-RPC API.

Simple XML-RPC Disabler

Down in the last 7 days:803#29,022

by Vikash Chand5 years ago

This plugin completely disables the XML-RPC API which can be abused by hackers on a WordPress site, providing an easy and simple way to disable/enable …

Version Cloak

Up in the last 7 days:176#29,576

by nextdoorentertainment4 months ago

Hide or decoy plugin, theme and core versions from scanners. Neutralize XML-RPC and lock down WP-Cron.

ForceField

Down in the last 7 days:228#30,279

by Tony Hayes1 year ago

Strong and Flexible Access, User Action, API, Behavioural and Role Protection

Omni Ping List Checker

#31,380

by omnitelecomltd8 months ago

Automatically updates your WordPress Update Services with a verified, working ping list from Omni Ping List Checker.

Basic Optimization

Down in the last 7 days:322#32,055

by Shah Alom4 months ago

A lightweight WordPress optimization plugin for disabling selected default frontend and header outputs such as emojis, shortlinks, embeds, XML-RPC, se …

GhostGate

Down in the last 7 days:6,011#33,822

by codegee09589 months ago

Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.

WP Remote Multisite Post

Up in the last 7 days:11,367#36,044

by lucia.intelisano11 years ago

Advanced remote posting from a wordpress master site to many wordpress clients using xml-rpc calls

Simple XML-RPC Pingback Disabler

Up in the last 7 days:9,597#36,109

by Vikash Chand5 years ago

This plugin simply disables only the XML-RPC API Pingback Methods used by hackers on a WordPress site, providing an easy and simple way to disable/ena …

BuddyPress XMLRPC

#39,092

by rich! @ etiviti16 years ago

This plugin allows certain XML-RPC commands for BuddyPress (Requires a client!)

BuddyPress XML-RPC Receiver

#40,679

by Yuttadhammo13 years ago

This plugin allows remote access to BuddyPress networks through an XML-RPC API.

Keys Master

Up in the last 7 days:5,883#42,373

by Pierre Lannoy2 months ago

Powerful application passwords manager for WordPress with role-based usage control and full analytics reporting capabilities.

YD Webhook to XML-RPC

Up in the last 7 days:3,538#43,122

by Yann at WP&Co15 years ago

Implement incoming Webhooks in WordPress

SecureFusion

#43,749

by fyndsoft3 months ago

Lightweight, high-performance security suite. Protects from brute-force logins, DDoS pingbacks, bad request injections, and manages CSP headers.

Extended API over XMLRPC

#46,007

by realflash9 years ago

A WordPress plugin that allows access to the whole WP API via XML-RPC.

Maasters Security Shield

#49,075

by The Maasters7 days ago

Practical WordPress hardening with configurable security headers, CSP modes, login rate limiting, XML-RPC controls, and version hiding.

Remove XML-RPC Pingback

#49,109

by Hybrid Webs6 years ago

Disable Pingback method from XML-RPC by simply removing it. This plugin is working with WordPress 4.4

Saeidbakhsh Core Settings

Up in the last 7 days:19,121#49,116

by Ahmadreza Saeidbakhsh2 months ago

A conservative, dependency-free, modular collection of small WordPress core tweaks designed for long-term maintainability.

Prunekit

#49,867

by nimboo16 days ago

Switch off the parts of WordPress you don't use. Safe defaults, one-click recommended settings, nothing changes until you turn it on.

RestArmor Security

Up in the last 7 days:2,490#50,152

by Md. Rakib Ullah9 months ago

Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.

Janric Simple Attack Monitor

Up in the last 7 days:7,480#57,603

by keithlunt4 months ago

Lightweight attack detection for WordPress. Logs brute force, XML-RPC abuse, SQL injection, XSS attempts and more. No bloat, no blocking — just data.

w3v-xml-rpc-security

Up in the last 7 days:9,765#59,952

by W3villa Technologies Pvt Ltd3 years ago

Securing site by disable XML-RPC by removing some methods.

ARACNE Security

#62,079

by CERWALL_SOLUTIONS3 days ago

Exposure scanner with a security score and basic WordPress hardening.

Stoutwall

#65,195

by Pitol3 days ago

Lightweight WordPress hardening with simple switches: limit login attempts, security headers, block PHP in uploads, disable XML-RPC and more.

PF Secure Toolkit

#66,528

by Poet Farmer1 year ago

PF Secure Toolkit is a lightweight, modular plugin to harden WordPress by disabling unnecessary features.

Janric Simple Security Hardening

Down in the last 7 days:6,726#69,676

by keithlunt5 months ago

A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.

Flex Website Security

#70,334

by Flex Plugins1 month ago

Practical WordPress hardening: login limits, XML-RPC, headers, enumeration protection, and more.

Disable Services Manager

#71,772

by Mayur Prajapati2 years ago

A powerful tool is available to help you disable unused services on your site, providing protection against spammers and enhancing overall website sec …