DawsonyWeb

<p>DawsonyWeb Security Shield protects your WordPress site from comment spam and unauthorised API access.</p>
<p><strong>Comment Protection</strong></p>
<ul>
<li>Master switch to completely disable all comments (form, REST API, XML-RPC, feeds)</li>
<li>Invisible honeypot field to trap bots</li>
<li>Minimum comment length enforcement</li>
<li>Block all links or cap links per comment</li>
<li>Require login to comment</li>
<li>Keyword/phrase blocklist</li>
</ul>
<p><strong>API & REST Hardening</strong></p>
<ul>
<li>Disable XML-RPC entirely (removes X-Pingback header too)</li>
<li>Hide <code>/wp/v2/users</code> endpoint to prevent username harvesting</li>
<li>Require authentication for all REST API requests</li>
<li>Optionally disable the REST API completely</li>
<li>Block author enumeration via <code>/?author=N</code></li>
</ul>
<p><strong>Spam Rules</strong></p>
<ul>
<li>Per-IP comment rate limiting (configurable max and time window)</li>
<li>IP address blocklist — blocked IPs receive a 403 on any front-end request</li>
<li>Rolling activity log (last 200 events)</li>
</ul>


DawsonyWeb – Security Shield

Spam comment protection, comment disabling, XML-RPC hardening, REST API lockdown, user enumeration blocking, and IP blocklisting.

Delower Hossain

MonarchWP

<p><strong>Simple Disable XML-RPC</strong> is a lightweight, powerful WordPress plugin that gives you complete control over your site’s XML-RPC functionality. Protect your WordPress site from brute force attacks, DDoS attempts, and other XML-RPC security vulnerabilities with just one click.</p>
<h3>🔒 Why Disable XML-RPC?</h3>
<p>XML-RPC is a remote communication protocol that allows external applications to interact with your WordPress site. While useful for some services, it’s frequently exploited by attackers for:</p>
<ul>
<li><strong>Brute Force Attacks</strong> – Automated password guessing attempts</li>
<li><strong>DDoS Attacks</strong> – Overwhelming your server with requests</li>
<li><strong>Resource Exhaustion</strong> – Slowing down your website</li>
<li><strong>Pingback Vulnerabilities</strong> – Exploiting pingback features</li>
</ul>
<h3>✨ Key Features</h3>
<ul>
<li><strong>🎯 One-Click Control</strong> – Modern toggle switch interface (NEW in v1.4.0)</li>
<li><strong>🔐 Enhanced Security</strong> – Block XML-RPC attacks instantly</li>
<li><strong>⚡ Improved Performance</strong> – Reduce server load and resource usage</li>
<li><strong>🎨 Beautiful Admin Interface</strong> – Clean, modern card-based design (NEW in v1.4.0)</li>
<li><strong>🌐 Translation Ready</strong> – Fully internationalized and translation-ready</li>
<li><strong>📱 Mobile Responsive</strong> – Settings page works perfectly on all devices</li>
<li><strong>🧹 Clean Uninstall</strong> – Removes all data when uninstalled</li>
<li><strong>⚙️ Developer Friendly</strong> – Well-coded, follows WordPress standards</li>
<li><strong>🔄 Regular Updates</strong> – Actively maintained and tested with latest WordPress versions</li>
<li><strong>💯 Lightweight</strong> – No bloat, minimal impact on your site</li>
</ul>
<h3>🆕 What’s New in Version 1.4.0</h3>
<ul>
<li>✅ Modern toggle switch replaces old checkbox</li>
<li>✅ Beautiful card-based admin interface</li>
<li>✅ Enhanced security with proper sanitization</li>
<li>✅ Better code organization (OOP approach)</li>
<li>✅ Improved accessibility and UX</li>
<li>✅ Removes X-Pingback header when disabled</li>
<li>✅ Fixed activation redirect for bulk installations</li>
<li>✅ Better mobile responsive design</li>
</ul>
<h3>🎯 Perfect For</h3>
<ul>
<li>Security-focused website owners</li>
<li>Sites that don’t use mobile apps or remote publishing</li>
<li>Sites experiencing XML-RPC attacks</li>
<li>Performance-conscious administrators</li>
<li>Anyone wanting better control over WordPress features</li>
</ul>
<h3>🔧 How It Works</h3>
<p>This plugin uses the native WordPress <code>xmlrpc_enabled</code> filter to safely disable XML-RPC without modifying core files. Simply activate the plugin, toggle the switch on the settings page, and you’re protected!</p>
<h3>⚠️ Important Note</h3>
<p>Disabling XML-RPC may affect:<br />
* WordPress mobile apps<br />
* Jetpack (some features)<br />
* Remote publishing tools<br />
* Pingbacks and trackbacks<br />
* Third-party services that rely on XML-RPC</p>
<p>Only disable XML-RPC if you don’t use these features.</p>
<h3>🤝 Contributing & Bug Reports</h3>
<p>Bug reports and pull requests are welcome on <a href="https://github.com/WordPress-Satkhira-Community/simple-disable-xml-rpc" rel="nofollow ugc">GitHub</a>. Help us make this plugin better!</p>
<h3>💝 Support the Development</h3>
<p>If you find this plugin helpful, please consider:<br />
* ⭐ <a href="https://wordpress.org/support/plugin/simple-disable-xml-rpc/reviews/" rel="ugc">Rating it 5 stars</a><br />
* 🐛 <a href="https://github.com/WordPress-Satkhira-Community/simple-disable-xml-rpc/issues" rel="nofollow ugc">Reporting bugs</a><br />
* 💬 <a href="https://github.com/WordPress-Satkhira-Community/simple-disable-xml-rpc/issues" rel="nofollow ugc">Suggesting features</a><br />
* ☕ <a href="https://www.wpsatkhira.com/donate" rel="nofollow ugc">Buying us a coffee</a></p>
<h3>Privacy Policy</h3>
<p>Simple Disable XML-RPC does not:</p>
<ul>
<li>Collect any user data</li>
<li>Store any personal information</li>
<li>Make external API calls</li>
<li>Use cookies or tracking</li>
<li>Send data to third parties</li>
</ul>
<p>The plugin only stores one setting in your WordPress database: whether XML-RPC is enabled or disabled.</p>
<h3>Support</h3>
<p>Need help? We’re here for you!</p>
<ul>
<li>📖 <a href="https://www.wpsatkhira.com" rel="nofollow ugc">Documentation</a></li>
<li>💬 <a href="https://wordpress.org/support/plugin/simple-disable-xml-rpc/" rel="ugc">Support Forum</a></li>
<li>🐛 <a href="https://github.com/WordPress-Satkhira-Community/simple-disable-xml-rpc/issues" rel="nofollow ugc">Report Bugs</a></li>
<li>⭐ <a href="https://wordpress.org/support/plugin/simple-disable-xml-rpc/reviews/" rel="ugc">Rate Plugin</a></li>
</ul>
<h3>Credits</h3>
<p>Developed with ❤️ by <a href="https://www.wpsatkhira.com" rel="nofollow ugc">WordPress Satkhira Community</a></p>
<p><strong>Contributors:</strong><br />
* <a href="https://profiles.wordpress.org/wpdelower/" rel="nofollow ugc">wpdelower</a><br />
* <a href="https://profiles.wordpress.org/monarchwp23/" rel="nofollow ugc">monarchwp23</a></p>
<p>Special thanks to all our users and contributors who help make this plugin better!</p>


Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks


A must needed plugin to disable XML-RPC and it's working fine right after enabling it.


Simple yet must needed


It's one of my go to plugin to make extra security layer. Thanks for this great plugin buddy. 


Very easy and ready to use

Simply disable XML-RPC on your WordPress site with a simple toggle switch. Protect your site from XML-RPC attacks and improve security.

DawsonyWeb – Security Shield vs Simple Disable XML-RPC | Reduce Brute Force & DDOS Attacks