Best xmlrpc plugins for WordPress
The most popular xmlrpc plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Disable XML-RPC leads with 200K+ active installs, ahead of Disable XML-RPC-API (100K+) and Remove & Disable XML-RPC Pingback (7K+). All 57 plugins tagged “xmlrpc” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 xmlrpc plugins
- 1.Disable XML-RPC
The most installed xmlrpc plugin, with 200K+ active installs. Rated 4.1 from 34 reviews, updated 5 months ago.
- 2.
Disable XML-RPC-API100K+ active installs. Rated 4.2 from 43 reviews, updated 9 months ago. Tested only up to WordPress 6.9.11.
- 3.
Remove & Disable XML-RPC Pingback7K+ active installs. Rated 3.0 from 6 reviews, last updated 3 years ago. Tested only up to WordPress 6.3.14.
- 4.
Stop XML-RPC Attacks6K+ active installs. Only 4 reviews so far, updated 2 months ago.
- 5.
Remove XML-RPC Methods1K+ active installs. Only 3 reviews so far, updated 2 months ago.
- 6.Rename XMLRPC
1K+ active installs. Rated 4.3 from 12 reviews, last updated 5 years ago. Tested only up to WordPress 5.7.21.
- 7.Simple Disable XML-RPC
1K+ active installs. Rated 5.0 from 5 reviews, updated 1 week ago.
- 8.
REST XML-RPC Data Checker800+ active installs. Only 3 reviews so far, last updated 4 years ago. Tested only up to WordPress 6.0.18.
- 9.
Eazy XMLRPC Pingback Disable700+ active installs. Only 4 reviews so far, last updated 8 years ago. Tested only up to WordPress 4.9.35.
- 10.
WP Login Door400+ active installs. Rated 5.0 from 6 reviews, last updated 1 year ago. Tested only up to WordPress 6.8.12.
All 57 plugins tagged “xmlrpc”
Disable XML-RPC
#263by Phil Erb5 months ago
Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.
- Installs
- 200K+
- Rating
- 4.1(34)
- Downloads
- 223/day

Disable XML-RPC-API
#388by Amin Nazemi9 months ago
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
- Installs
- 100K+
- Rating
- 4.2(43)
- Downloads
- 269/day

Remove & Disable XML-RPC Pingback
Down in the last 7 days:4#2,541by cleverplugins3 years ago
Prevent pingback, XML-RPC and denial of service DDOS attacks by disabling the XML-RPC pingback functionality.
- Installs
- 7K+
- Rating
- 3.0(6)
- Downloads
- 22/day

Stop XML-RPC Attacks
Up in the last 7 days:1#2,920by Pascal CESCATO2 months ago
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
- Installs
- 6K+
- Rating
- 5.0(4)
- Downloads
- 24/day

Remove XML-RPC Methods
Down in the last 7 days:5#5,326by Walter Ebert2 months ago
Remove all WordPress methods from the XML-RPC API to increase security.
- Installs
- 1K+
- Rating
- 5.0(3)
- Downloads
- 22/day
Rename XMLRPC
Down in the last 7 days:17#5,987by Jorge Bernal5 years ago
Make XML-RPC work if you rename the file. Some hosts block access to xmlrpc.php file making it impossible to use
- Installs
- 1K+
- Rating
- 4.3(12)
- Downloads
- 11/day
Simple Disable XML-RPC
Up in the last 7 days:108#6,090by Delower Hossain11 days ago
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
- Installs
- 1K+
- Rating
- 5.0(5)
- Downloads
- 49/day

REST XML-RPC Data Checker
Up in the last 7 days:8#7,352by Enrico Sorcinelli4 years ago
REST XML-RPC Data Checker allow to check JSON REST and XML-RPC API requests and grant access permissions.
- Installs
- 800+
- Rating
- 5.0(3)
- Downloads
- 11/day

Eazy XMLRPC Pingback Disable
Down in the last 7 days:3#7,819by Rob Scott8 years ago
This plugin disables the WordPress XMLRPC pingback ping.
- Installs
- 700+
- Rating
- 5.0(4)
- Downloads
- 11/day

WP Login Door
Down in the last 7 days:27#9,435by toxnico1 year ago
Adds a secret URL key to access the login page and lets you disable XML-RPC, protecting against bruteforce attacks.
- Installs
- 400+
- Rating
- 5.0(6)
- Downloads
- 11/day
Control XML-RPC publishing
Down in the last 7 days:55#9,723by Mark-k11 years ago
Control remote publishing with XML-RPC from the writing settings page.
- Installs
- 400+
- Rating
- 5.0(2)
- Downloads
- 6/day

WP Tweaks
Up in the last 7 days:22#11,834by Luiz Bills1 year ago
Several opinionated WordPress tweaks focused in security and performance.
- Installs
- 200+
- Rating
- 5.0(3)
- Downloads
- 8/day
Deactivate XML-RPC on WordPress
Down in the last 7 days:19#12,476by tildemark11 years ago
This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …
- Installs
- 200+
- Rating
- –
- Downloads
- 0/day

Deactivate XML-RPC Service
Down in the last 7 days:25#13,506by DeveloperWil2 months ago
Disables the XMP-RPC API service introduced in WordPress 3.5 and above.
- Installs
- 100+
- Rating
- –
- Downloads
- 0/day
Disable Pingbacks
Up in the last 7 days:76#15,414by Glen Scott9 years ago
This plugin disables the Pingback functionality in your blog.
- Installs
- 100+
- Rating
- –
- Downloads
- 0/day
Disable XML RPC Fully
Down in the last 7 days:96#15,506by Jonny Harris12 years ago
Simple plugin that disables XML-RPC.
- Installs
- 100+
- Rating
- 5.0(1)
- Downloads
- 13/day
Syndication
Up in the last 7 days:75#17,327by Automattic1 month ago
Syndicate content to and from your WordPress sites. Push posts to multiple destinations or pull content from external feeds with a single click.
- Installs
- 90+
- Rating
- 4.3(4)
- Downloads
- 6/day
XML-RPC Modernization
Down in the last 7 days:37#17,974by Max Cutler14 years ago
This plugin updates the WordPress XML-RPC API to leverage the latest features of WordPress and move beyond the historical Blogger/metaWeblog/MT APIs.
- Installs
- 80+
- Rating
- 5.0(2)
- Downloads
- 0/day

Login Delay Shield
Up in the last 7 days:159#18,385by michael.damoiseau1 month ago
Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.
- Installs
- 70+
- Rating
- 4.4(5)
- Downloads
- 11/day
XMLRPC Lockdown by AO Digital
Down in the last 7 days:40#20,136by aodigitalau1 year ago
XMLRPC Lockdown by AO Digital is an advanced security plugin for WordPress. It blocks access to xmlrpc.php for all requests except those explicitly al …
- Installs
- 50+
- Rating
- 5.0(1)
- Downloads
- 0/day

Native WP Cleaner
Up in the last 7 days:19#20,769by Oleg Komarovskyi9 years ago
Disable native widgets, clean head tag from RSS, RSD, WLW Manifest links, disable XML-RPC, cleanup admin panel from columns, metaboxes, menu items.
- Installs
- 50+
- Rating
- 5.0(2)
- Downloads
- 0/day

Secure XML-RPC
Up in the last 7 days:38#21,424by Eric Mann12 years ago
More secure wrapper for the WordPress XML-RPC interface.
- Installs
- 40+
- Rating
- 3.7(3)
- Downloads
- 0/day
Disable XML-RPC & Unset X-Pingback
Down in the last 7 days:83#21,526by Swellfire12 years ago
This plugin disables XML-RPC API in WordPress 3.5+, which is enabled by default.
- Installs
- 40+
- Rating
- 5.0(1)
- Downloads
- 0/day
Author Default Category
Down in the last 7 days:36#23,869by z72015 years ago
Any author (user can edit posts) can set its own default category on his profil page.
- Installs
- 30+
- Rating
- 5.0(1)
- Downloads
- 6/day

XML-RPC Settings
Down in the last 7 days:12#25,020by vavkamil5 years ago
Secure your website with the most comprehensive XML-RPC Settings plugin.
- Installs
- 30+
- Rating
- –
- Downloads
- 0/day

Disable XML-RPC
Up in the last 7 days:126#25,704by aph51 month ago
Quickly toggle XML-RPC on/off from your dashboard. Perfect for temporarily enabling access for mobile apps, then securing your site again.
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day

WT Hardening
Down in the last 7 days:212#26,749by Webmasters.Team1 month ago
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day
YaBlog
#27,618by Anton Paramonov11 years ago
Allows administrators to globally disable XML-RPC, new emoji functionality in WordPress 4.2, wp generator, wlwmanifest, RSD EditURI and rss/feeds on t …
- Installs
- 20+
- Rating
- 5.0(1)
- Downloads
- 0/day
XML-RPC De-whitespacer
#28,090by Max Cutler14 years ago
Removes leading and trailing whitespace from XML-RPC responses that can break some XML-RPC clients.
- Installs
- 20+
- Rating
- 5.0(2)
- Downloads
- 0/day

WP Snakemember Integration
Down in the last 7 days:98#28,124by snakemember1 year ago
Wordpress integration plugin for SnakeMember
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day

Simple XML-RPC Disabler
Down in the last 7 days:803#29,022by Vikash Chand5 years ago
This plugin completely disables the XML-RPC API which can be abused by hackers on a WordPress site, providing an easy and simple way to disable/enable …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Poke Monitor
Up in the last 7 days:1,163#31,041by Gabor Angyal26 days ago
See who is poking your site: Cloudflare bypasses, secret-file scans, backdoor access, XML-RPC abuse and scanner user agents.
- Installs
- 10+
- Rating
- –
- Downloads
- 5/day
ImageURLReturner
#32,948imageurlreturner16 years ago
When an XML-RPC Wordpress client uploads a photo, this plugin add the URLs for the resized images to the response so they can be used by the client in …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

ThreatPoint IP Reputation
Down in the last 7 days:1,156#34,689by ThreatPoint UK1 month ago
This plugin protects WordPress Sites from unwanted malicious access attempts by leveraging IP reputation data provided by the ThreatPoint IP reputatio …
- Installs
- 10+
- Rating
- 5.0(3)
- Downloads
- 0/day
Gallery Plugin XMLRPC Interface
#35,398by Peidong Hu14 years ago
This plugin creates functions for Gallery Plugin which can be XMLRPC invoked remotely.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Simple XML-RPC Pingback Disabler
Up in the last 7 days:9,597#36,109by Vikash Chand5 years ago
This plugin simply disables only the XML-RPC API Pingback Methods used by hackers on a WordPress site, providing an easy and simple way to disable/ena …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
YD Webhook to XML-RPC
#37,544by Yann at WP&Co15 years ago
Implement incoming Webhooks in WordPress
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
BuddyPress XMLRPC
#39,092by rich! @ etiviti16 years ago
This plugin allows certain XML-RPC commands for BuddyPress (Requires a client!)
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
BuddyPress XML-RPC Receiver
#40,679by Yuttadhammo13 years ago
This plugin allows remote access to BuddyPress networks through an XML-RPC API.
- Installs
- 10+
- Rating
- 2.8(4)
- Downloads
- 0/day
Junoe XML-PRC Additionals
Down in the last 7 days:5,895#41,236by tohokuaiki11 years ago
This plugin supply additional XML-RPC methods to your WordPress.And some shortcode tag.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Multisite XML-RPC
Up in the last 7 days:2,380#43,056by renanivo16 years ago
Adds some Multisite-specific functions to WordPress' XML-RPC interface.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Hopelessly Sensible
#43,385by Hebble & Stone CIC18 days ago
Security hardening for people who have better things to do. Seven options, plain English and clear information about what changes.
- Installs
- 10+
- Rating
- 5.0(1)
- Downloads
- 0/day
Blockinator
Down in the last 7 days:5,261#45,557by stoffijn8 years ago
This plugin will remove script and version numbers from the source of your pages.
- Installs
- 10+
- Rating
- 5.0(2)
- Downloads
- 0/day
Text to Custom Field
#46,189by WPReady14 years ago
Allows adding custom fields from ANY desktop blog editor even if the editor can't support custom fields!
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

WebDoktoru Security
#46,576by WebDoktoru10 months ago
Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
wp-webservices
Down in the last 7 days:2,894#46,586by Prasath Nadarajah15 years ago
This plugin extends the basic webservices exposed by WordPress.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Drupal to WP XML-RPC
Down in the last 7 days:8,204#46,984by aliciagh16 years ago
Adds some Multisite-specific functions to WordPress XML-RPC interface.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Fixora Disable XML-RPC
Down in the last 7 days:370#54,294by Fixora Labs1 month ago
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

OpenSimulator Bridge
Up in the last 7 days:10,320#57,340by Casey3 years ago
Manage OpenSimulator grid users via the WordPress user management system.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Holographic Login Shield
Up in the last 7 days:12,591#59,348by Holographic5 months ago
Lightweight login protection, brute-force defence and safer admin access controls for WordPress.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day