Best xmlrpc plugins for WordPress
The most popular xmlrpc plugins for WordPress in November 2026, in WordPress.org’s own popular order, which follows active installs. Disable XML-RPC leads with 200K+ active installs, ahead of Disable XML-RPC-API (100K+) and Remove & Disable XML-RPC Pingback (7K+). All 57 plugins tagged “xmlrpc” are below, with figures from WordPress.org that update every day.
Installs aren’t everything: a recent release, a “Tested up to” that matches the current WordPress, and support threads that get resolved show a plugin is looked after. Open any plugin for its downloads, rank history and alternatives.
Research this niche or see all plugins.
Top 10 xmlrpc plugins
- 1.Disable XML-RPC
The most installed xmlrpc plugin, with 200K+ active installs. Rated 4.1 from 34 reviews, updated 5 months ago.
- 2.
Disable XML-RPC-API100K+ active installs. Rated 4.2 from 43 reviews, updated 9 months ago. Tested only up to WordPress 6.9.11.
- 3.
Remove & Disable XML-RPC Pingback7K+ active installs. Rated 3.0 from 6 reviews, last updated 3 years ago. Tested only up to WordPress 6.3.14.
- 4.
Stop XML-RPC Attacks5K+ active installs. Only 4 reviews so far, updated 2 months ago.
- 5.
Remove XML-RPC Methods1K+ active installs. Only 3 reviews so far, updated 2 months ago.
- 6.Rename XMLRPC
1K+ active installs. Rated 4.3 from 12 reviews, last updated 5 years ago. Tested only up to WordPress 5.7.21.
- 7.Simple Disable XML-RPC
1K+ active installs. Rated 5.0 from 5 reviews, updated 1 week ago.
- 8.
REST XML-RPC Data Checker800+ active installs. Only 3 reviews so far, last updated 4 years ago. Tested only up to WordPress 6.0.18.
- 9.
Eazy XMLRPC Pingback Disable700+ active installs. Only 4 reviews so far, last updated 8 years ago. Tested only up to WordPress 4.9.35.
- 10.
WP Login Door400+ active installs. Rated 5.0 from 6 reviews, last updated 1 year ago. Tested only up to WordPress 6.8.12.
All 57 plugins tagged “xmlrpc”
Disable XML-RPC
#263by Phil Erb5 months ago
Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.
- Installs
- 200K+
- Rating
- 4.1(34)
- Downloads
- 221/day

Disable XML-RPC-API
#388by Amin Nazemi9 months ago
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
- Installs
- 100K+
- Rating
- 4.2(43)
- Downloads
- 269/day

Remove & Disable XML-RPC Pingback
Down in the last 7 days:4#2,543by cleverplugins3 years ago
Prevent pingback, XML-RPC and denial of service DDOS attacks by disabling the XML-RPC pingback functionality.
- Installs
- 7K+
- Rating
- 3.0(6)
- Downloads
- 22/day

Stop XML-RPC Attacks
Up in the last 7 days:3#2,921by Pascal CESCATO2 months ago
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
- Installs
- 5K+
- Rating
- 5.0(4)
- Downloads
- 24/day

Remove XML-RPC Methods
Down in the last 7 days:2#5,324by Walter Ebert2 months ago
Remove all WordPress methods from the XML-RPC API to increase security.
- Installs
- 1K+
- Rating
- 5.0(3)
- Downloads
- 22/day
Rename XMLRPC
Down in the last 7 days:20#5,991by Jorge Bernal5 years ago
Make XML-RPC work if you rename the file. Some hosts block access to xmlrpc.php file making it impossible to use
- Installs
- 1K+
- Rating
- 4.3(12)
- Downloads
- 11/day
Simple Disable XML-RPC
Up in the last 7 days:60#6,104by Delower Hossain12 days ago
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
- Installs
- 1K+
- Rating
- 5.0(5)
- Downloads
- 38/day

REST XML-RPC Data Checker
Down in the last 7 days:20#7,372by Enrico Sorcinelli4 years ago
REST XML-RPC Data Checker allow to check JSON REST and XML-RPC API requests and grant access permissions.
- Installs
- 800+
- Rating
- 5.0(3)
- Downloads
- 11/day

Eazy XMLRPC Pingback Disable
Up in the last 7 days:3#7,823by Rob Scott8 years ago
This plugin disables the WordPress XMLRPC pingback ping.
- Installs
- 700+
- Rating
- 5.0(4)
- Downloads
- 11/day

WP Login Door
Up in the last 7 days:10#9,422by toxnico1 year ago
Adds a secret URL key to access the login page and lets you disable XML-RPC, protecting against bruteforce attacks.
- Installs
- 400+
- Rating
- 5.0(6)
- Downloads
- 11/day
Control XML-RPC publishing
Down in the last 7 days:33#9,698by Mark-k11 years ago
Control remote publishing with XML-RPC from the writing settings page.
- Installs
- 400+
- Rating
- 5.0(2)
- Downloads
- 6/day

WP Tweaks
Up in the last 7 days:3#11,859by Luiz Bills1 year ago
Several opinionated WordPress tweaks focused in security and performance.
- Installs
- 200+
- Rating
- 5.0(3)
- Downloads
- 11/day
Deactivate XML-RPC on WordPress
Up in the last 7 days:1#12,459by tildemark11 years ago
This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …
- Installs
- 200+
- Rating
- –
- Downloads
- 0/day

Deactivate XML-RPC Service
Up in the last 7 days:20#13,459by DeveloperWil2 months ago
Disables the XMP-RPC API service introduced in WordPress 3.5 and above.
- Installs
- 100+
- Rating
- –
- Downloads
- 0/day
Disable XML RPC Fully
Down in the last 7 days:93#15,494by Jonny Harris12 years ago
Simple plugin that disables XML-RPC.
- Installs
- 100+
- Rating
- 5.0(1)
- Downloads
- 11/day
Disable Pingbacks
Down in the last 7 days:4#15,530by Glen Scott9 years ago
This plugin disables the Pingback functionality in your blog.
- Installs
- 100+
- Rating
- –
- Downloads
- 0/day
Syndication
Up in the last 7 days:188#17,264by Automattic1 month ago
Syndicate content to and from your WordPress sites. Push posts to multiple destinations or pull content from external feeds with a single click.
- Installs
- 90+
- Rating
- 4.3(4)
- Downloads
- 6/day
XML-RPC Modernization
Up in the last 7 days:55#17,913by Max Cutler14 years ago
This plugin updates the WordPress XML-RPC API to leverage the latest features of WordPress and move beyond the historical Blogger/metaWeblog/MT APIs.
- Installs
- 80+
- Rating
- 5.0(2)
- Downloads
- 0/day

Login Delay Shield
Up in the last 7 days:213#18,330by michael.damoiseau1 month ago
Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.
- Installs
- 70+
- Rating
- 4.4(5)
- Downloads
- 11/day

Native WP Cleaner
Down in the last 7 days:51#20,803by Oleg Komarovskyi9 years ago
Disable native widgets, clean head tag from RSS, RSD, WLW Manifest links, disable XML-RPC, cleanup admin panel from columns, metaboxes, menu items.
- Installs
- 50+
- Rating
- 5.0(2)
- Downloads
- 0/day
XMLRPC Lockdown by AO Digital
Down in the last 7 days:1,145#21,264by aodigitalau1 year ago
XMLRPC Lockdown by AO Digital is an advanced security plugin for WordPress. It blocks access to xmlrpc.php for all requests except those explicitly al …
- Installs
- 50+
- Rating
- 5.0(1)
- Downloads
- 0/day

Secure XML-RPC
Down in the last 7 days:171#21,459by Eric Mann12 years ago
More secure wrapper for the WordPress XML-RPC interface.
- Installs
- 40+
- Rating
- 3.7(3)
- Downloads
- 0/day
Disable XML-RPC & Unset X-Pingback
Down in the last 7 days:222#21,677by Swellfire12 years ago
This plugin disables XML-RPC API in WordPress 3.5+, which is enabled by default.
- Installs
- 40+
- Rating
- 5.0(1)
- Downloads
- 0/day
Author Default Category
Down in the last 7 days:128#23,881by z72015 years ago
Any author (user can edit posts) can set its own default category on his profil page.
- Installs
- 30+
- Rating
- 5.0(1)
- Downloads
- 6/day

XML-RPC Settings
Down in the last 7 days:203#25,277by vavkamil5 years ago
Secure your website with the most comprehensive XML-RPC Settings plugin.
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day

Disable XML-RPC
Up in the last 7 days:245#25,686by aph52 months ago
Quickly toggle XML-RPC on/off from your dashboard. Perfect for temporarily enabling access for mobile apps, then securing your site again.
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day

WT Hardening
Up in the last 7 days:216#26,502by Webmasters.Teamtoday
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day
YaBlog
Down in the last 7 days:48#27,717by Anton Paramonov11 years ago
Allows administrators to globally disable XML-RPC, new emoji functionality in WordPress 4.2, wp generator, wlwmanifest, RSD EditURI and rss/feeds on t …
- Installs
- 20+
- Rating
- 5.0(1)
- Downloads
- 0/day

WP Snakemember Integration
Up in the last 7 days:104#28,040by snakemember1 year ago
Wordpress integration plugin for SnakeMember
- Installs
- 20+
- Rating
- –
- Downloads
- 0/day
XML-RPC De-whitespacer
#28,086by Max Cutler14 years ago
Removes leading and trailing whitespace from XML-RPC responses that can break some XML-RPC clients.
- Installs
- 20+
- Rating
- 5.0(2)
- Downloads
- 0/day

Simple XML-RPC Disabler
Down in the last 7 days:344#28,973by Vikash Chand5 years ago
This plugin completely disables the XML-RPC API which can be abused by hackers on a WordPress site, providing an easy and simple way to disable/enable …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Poke Monitor
Up in the last 7 days:1,163#31,041by Gabor Angyal27 days ago
See who is poking your site: Cloudflare bypasses, secret-file scans, backdoor access, XML-RPC abuse and scanner user agents.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
ImageURLReturner
Up in the last 7 days:476#32,428imageurlreturner16 years ago
When an XML-RPC Wordpress client uploads a photo, this plugin add the URLs for the resized images to the response so they can be used by the client in …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

ThreatPoint IP Reputation
Down in the last 7 days:1,156#34,689by ThreatPoint UK1 month ago
This plugin protects WordPress Sites from unwanted malicious access attempts by leveraging IP reputation data provided by the ThreatPoint IP reputatio …
- Installs
- 10+
- Rating
- 5.0(3)
- Downloads
- 0/day

Simple XML-RPC Pingback Disabler
Up in the last 7 days:9,597#36,109by Vikash Chand5 years ago
This plugin simply disables only the XML-RPC API Pingback Methods used by hackers on a WordPress site, providing an easy and simple way to disable/ena …
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Gallery Plugin XMLRPC Interface
Up in the last 7 days:8,581#38,656by Peidong Hu14 years ago
This plugin creates functions for Gallery Plugin which can be XMLRPC invoked remotely.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

WebDoktoru Security
Up in the last 7 days:1,476#40,346by WebDoktoru10 months ago
Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Junoe XML-PRC Additionals
Down in the last 7 days:5,895#41,236by tohokuaiki11 years ago
This plugin supply additional XML-RPC methods to your WordPress.And some shortcode tag.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
BuddyPress XMLRPC
#42,155by rich! @ etiviti16 years ago
This plugin allows certain XML-RPC commands for BuddyPress (Requires a client!)
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

Hopelessly Sensible
#42,829by Hebble & Stone CIC19 days ago
Security hardening for people who have better things to do. Seven options, plain English and clear information about what changes.
- Installs
- 10+
- Rating
- 5.0(1)
- Downloads
- 0/day
Multisite XML-RPC
Up in the last 7 days:2,380#43,056by renanivo16 years ago
Adds some Multisite-specific functions to WordPress' XML-RPC interface.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
YD Webhook to XML-RPC
Up in the last 7 days:3,538#43,122by Yann at WP&Co15 years ago
Implement incoming Webhooks in WordPress
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
BuddyPress XML-RPC Receiver
Down in the last 7 days:4,300#43,689by Yuttadhammo13 years ago
This plugin allows remote access to BuddyPress networks through an XML-RPC API.
- Installs
- 10+
- Rating
- 2.8(4)
- Downloads
- 0/day
Blockinator
Down in the last 7 days:5,261#45,557by stoffijn8 years ago
This plugin will remove script and version numbers from the source of your pages.
- Installs
- 10+
- Rating
- 5.0(2)
- Downloads
- 0/day
Text to Custom Field
#45,777by WPReady14 years ago
Allows adding custom fields from ANY desktop blog editor even if the editor can't support custom fields!
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
wp-webservices
Down in the last 7 days:3,290#46,368by Prasath Nadarajah15 years ago
This plugin extends the basic webservices exposed by WordPress.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day
Drupal to WP XML-RPC
Down in the last 7 days:8,204#46,984by aliciagh16 years ago
Adds some Multisite-specific functions to WordPress XML-RPC interface.
- Installs
- 10+
- Rating
- –
- Downloads
- 0/day

WebsiteFix One-Click Performance Optimizer
#49,364by websitefixcom5 months ago
Activate 7 WordPress performance and security fixes with one click. Safe, reversible, no code editing required.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

Holographic Login Shield
Up in the last 7 days:12,591#59,348by Holographic5 months ago
Lightweight login protection, brute-force defence and safer admin access controls for WordPress.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day

HSArticle Login Warden
Up in the last 7 days:2,422#63,718by hsarticle1 month ago
Hide your login URL and stop leaking your admin usernames. Custom login URL, XML-RPC lockdown, and enumeration blocking.
- Installs
- <10
- Rating
- –
- Downloads
- 0/day