Plugin info

Total downloads: 258
Active installs: 0
Total reviews: 0
Average rating: 0
Support threads opened: 0
Support threads resolved: 0 (0%)
Available in: 1 language(s)
Contributors: 1
Last updated: 5/14/2025 (231 days ago)
Added to WordPress: 5/11/2025 (0 years old)
Minimum WordPress version: 5.0
Tested up to WordPress version: 6.8.3
Minimum PHP version: 7.2

Maintenance & Compatibility

Maintenance score

Stale • Last updated 231 days ago

38/100

Is xml rpc off now abandoned?

Likely maintained (last update 231 days ago).

Compatibility

Requires WordPress: 5.0
Tested up to: 6.8.3
Requires PHP: 7.2

Languages

Similar & Alternatives

Explore plugins with similar tags, and compare key metrics like downloads, ratings, updates, support, and WP/PHP compatibility.

CAOS | Host Google Analytics Locally
Rating 4.9/5 (128 reviews)Active installs 10,000
Admin Trim Interface
Rating 5.0/5 (3 reviews)Active installs 1,000
Labinator Minimal Maintenance Mode
Rating 5.0/5 (4 reviews)Active installs 200
WP Minimize Admin Bar
Rating 5.0/5 (1 reviews)Active installs 200
Minimal Maintenance Mode
Rating 0.0/5 (0 reviews)Active installs 200
Minimal Admin
Rating 0.0/5 (0 reviews)Active installs 20

Description

This plugin disables the XML-RPC functionality in WordPress by using the xmlrpc_enabled filter. XML-RPC can be used for brute-force attacks and other malicious purposes. Most WordPress sites do not require it anymore.

Further Information

Support and more information

Features:

  • Disables all XML-RPC functionality
  • Shows a one-line admin notice (visible to administrators only, on the Dashboard)
  • No settings, no bloat

This plugin is lightweight and suitable for minimal or security-focused setups.

Credits

Maintained by openzenta. Suggestions and contributions welcome!

Installation

  1. Upload the plugin folder to the /wp-content/plugins/ directory.
  2. Activate the plugin through the ‘Plugins’ menu in WordPress.
  3. That’s it. XML-RPC is now disabled.

Frequently Asked Questions

Can I re-enable XML-RPC later?

Yes, simply deactivate or uninstall this plugin.

Does this affect the REST API?

No. The WordPress REST API remains fully functional.

Review feed

No reviews available

Screenshots

No screenshots available

Changelog

1.0

  • Initial release – disables XML-RPC