pontocinza

When a post is published or updated, Internal Pingback Comments scans its content, finds all internal links, and creates a pingback-style comment on each linked post. It mimics native WordPress pingback behavior but eliminates the need for XML-RPC or outbound network requests.
Works with posts only. No settings page, no configuration.
How it works
The plugin parses post content with DOMDocument — not regex — so it handles real-world HTML correctly: nested tags, encoded entities, relative and protocol-relative URLs. For each internal link found, it inserts a pingback comment on the target post. The comment includes a short excerpt from the source post, with image captions (figcaption) stripped so they do not bleed into the pingback text.
Duplicate detection is precise: the source permalink is stored as private comment meta, and the plugin queries that meta before every insert. Republishing or updating a post never creates duplicate comments. New links added to an existing post will generate their own pingbacks on the next save.
What the pingback looks like to your theme
The comment is stored with <code>comment_type = 'pingback'</code> and auto-approved. Your theme renders it exactly as it would render a native pingback. If your theme does not display pingbacks, the comment will be stored in the database but remain hidden on the front end.
<h3>Disclaimer</h3>
This plugin is provided “as is”, without warranty of any kind. While best efforts have been made to ensure reliability and security, the author is not liable for any damages or losses resulting from its use.

Internal Pingback Comments

Detects internal links in posts and automatically inserts a pingback-style comment on each linked post. No XML-RPC required.

Pascal CESCATO

Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes while maintaining compatibility with essential services like Jetpack and WooCommerce.
Features:
<ul>
<li>Three security modes: Full Disable, Guest Disable, or Selective Blocking</li>
<li>Blocks dangerous methods: system.multicall, pingback.ping, and more</li>
<li>Compatible with Jetpack and WooCommerce</li>
<li>Optional user enumeration blocking</li>
<li>Attack logging for monitoring</li>
<li>Zero configuration required – works out of the box</li>
<li>Clean, intuitive admin interface</li>
</ul>

Stop XML-RPC Attacks

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Internal Pingback Comments vs Stop XML-RPC Attacks