Simple Disable XML-RPC

Simple Disable XML-RPC is a lightweight, powerful WordPress plugin that gives you complete control over your site’s XML-RPC functionality. Protect your WordPress site from brute force attacks, DDoS attempts, and other XML-RPC security vulnerabilities with just one click.

🔒 Why Disable XML-RPC?

XML-RPC is a remote communication protocol that allows external applications to interact with your WordPress site. While useful for some services, it’s frequently exploited by attackers for:

• Brute Force Attacks – Automated password guessing attempts
• DDoS Attacks – Overwhelming your server with requests
• Resource Exhaustion – Slowing down your website
• Pingback Vulnerabilities – Exploiting pingback features

✨ Key Features

• 🎯 One-Click Control – Modern toggle switch interface (NEW in v1.4.0)
• 🔐 Enhanced Security – Block XML-RPC attacks instantly
• ⚡ Improved Performance – Reduce server load and resource usage
• 🎨 Beautiful Admin Interface – Clean, modern card-based design (NEW in v1.4.0)
• 🌐 Translation Ready – Fully internationalized and translation-ready
• 📱 Mobile Responsive – Settings page works perfectly on all devices
• 🧹 Clean Uninstall – Removes all data when uninstalled
• ⚙️ Developer Friendly – Well-coded, follows WordPress standards
• 🔄 Regular Updates – Actively maintained and tested with latest WordPress versions
• 💯 Lightweight – No bloat, minimal impact on your site

🆕 What’s New in Version 1.4.0

• ✅ Modern toggle switch replaces old checkbox
• ✅ Beautiful card-based admin interface
• ✅ Enhanced security with proper sanitization
• ✅ Better code organization (OOP approach)
• ✅ Improved accessibility and UX
• ✅ Removes X-Pingback header when disabled
• ✅ Fixed activation redirect for bulk installations
• ✅ Better mobile responsive design

🎯 Perfect For

• Security-focused website owners
• Sites that don’t use mobile apps or remote publishing
• Sites experiencing XML-RPC attacks
• Performance-conscious administrators
• Anyone wanting better control over WordPress features

🔧 How It Works

This plugin uses the native WordPress xmlrpc_enabled filter to safely disable XML-RPC without modifying core files. Simply activate the plugin, toggle the switch on the settings page, and you’re protected!

⚠️ Important Note

Disabling XML-RPC may affect:
* WordPress mobile apps
* Jetpack (some features)
* Remote publishing tools
* Pingbacks and trackbacks
* Third-party services that rely on XML-RPC

Only disable XML-RPC if you don’t use these features.

🤝 Contributing & Bug Reports

Read the full description on the official page →