WordPress xml-rpc plugins

A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website

Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.

Creates unique passwords for applications to authenticate users without revealing their main passwords.

Enhance the Security and User Experience of Your Site with Login/Signup Security, Two-Factor Email Authentication, Social Logins and more...

Prevent pingback, XML-RPC and denial of service DDOS attacks by disabling the XML-RPC pingback functionality.

Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from HTTP headers.

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Avatar Manager for WordPress is a sweet and simple plugin for storing avatars locally and more. Easily.

Remove all WordPress methods from the XML-RPC API to increase security.

Control remote publishing with XML-RPC from the writing settings page.

Work around for some versions of libxml2 2.7.x that strip out brackets when parsing XML. This plugin fixes XML-RPC requests that are mangled because …

This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …

TrimPress optimizes and trims some of the cruft from WordPress for a lighter, more secure theme!

Disables the XMP-RPC API service introduced in WordPress 3.5 and above.

This plugin updates the WordPress XML-RPC API to leverage the latest features of WordPress and move beyond the historical Blogger/metaWeblog/MT APIs.

This plugin allows to set some security improvements to your WordPress site. Blocking attempts of scan from WPScan and other similar tools.

A lightweight WordPress optimization plugin for disabling selected default frontend and header outputs such as emojis, shortlinks, embeds, XML-RPC, se …

This plugin allow CORS(Cross-Origin Resource Sharing) for XML-RPC API.

This plugin completely disables the XML-RPC API which can be abused by hackers on a WordPress site, providing an easy and simple way to disable/enable …

Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.

This plugin allows remote access to BuddyPress networks through an XML-RPC API.

Lightweight, high-performance security suite. Protects from brute-force logins, DDoS pingbacks, bad request injections, and manages CSP headers.

Removes leading and trailing whitespace from XML-RPC responses that can break some XML-RPC clients.

Powerful application passwords manager for WordPress with role-based usage control and full analytics reporting capabilities.

Implement incoming Webhooks in WordPress

This plugin allows certain XML-RPC commands for BuddyPress (Requires a client!)

This plugin extends the default XML-RPC server API with one new method for specifying author and parent post of remotely uploaded attachment files.

Advanced remote posting from a wordpress master site to many wordpress clients using xml-rpc calls

Disable the XML RPC protocol in one click.

A WordPress plugin that allows access to the whole WP API via XML-RPC.

Strong and Flexible Access, User Action, API, Behavioural and Role Protection

This plugin simply disables only the XML-RPC API Pingback Methods used by hackers on a WordPress site, providing an easy and simple way to disable/ena …

Securing site by disable XML-RPC by removing some methods.

AUX provides an XML-RPC function for running the built in WordPress auto-upgrade using XML-RPC.

Disable Pingback method from XML-RPC by simply removing it. This plugin is working with WordPress 4.4

A powerful tool is available to help you disable unused services on your site, providing protection against spammers and enhancing overall website sec …

PF Secure Toolkit is a lightweight, modular plugin to harden WordPress by disabling unnecessary features.

Advanced security suite. Blocks REST API, disables XML-RPC, prevents user enumeration, and secures endpoints.

Disables XML-RPC in WordPress for improved security. Lightweight, no settings.

Automatically updates your WordPress Update Services with a verified, working ping list from Omni Ping List Checker.

A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.

Lightweight attack detection for WordPress. Logs brute force, XML-RPC abuse, SQL injection, XSS attempts and more. No bloat, no blocking — just data.