WPThumbs
Themes Plugins By purpose By industry Best-of lists Fix it guides
Free Plugin by Pascal CESCATO v2.0.0

Stop XML-RPC Attacks

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Stop XML-RPC Attacks

The facts

Rating
5★ from 4
Active installs
6k+
Price
Free
Last updated
27 Aug 2026
Added
Apr 2019
Requires WP
6.0
Tested up to
WP 7.1
Requires PHP
7.4
Downloads
29,633

Our analysis

AI-assisted

Stop XML-RPC Attacks is a WordPress plugin designed to protect your site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes. It offers three security modes and blocks specific dangerous methods while remaining compatible with services like Jetpack and WooCommerce.

This plugin is suitable for WordPress site owners who want to enhance their site's security without needing extensive configuration. It provides an intuitive admin interface and includes features such as attack logging and optional user enumeration blocking.

Best for: WordPress site owners looking for an easy way to improve security against XML-RPC attacks.

What it does well

  • ✓Protects against XML-RPC brute force attacks and DDoS attempts
  • ✓Three security modes available
  • ✓Blocks dangerous XML-RPC methods
  • ✓Compatible with Jetpack and WooCommerce
  • ✓No configuration required

Where it falls short

  • •Limited information on specific effectiveness against all attack types

Verdict

This plugin provides a straightforward solution for enhancing security against specific threats. It is particularly useful for users of Jetpack and WooCommerce who want to maintain compatibility while protecting their sites.

From the developer

Pascal CESCATO's own description of Stop XML-RPC Attacks, lightly tidied.

Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes while maintaining compatibility with essential services like Jetpack and WooCommerce.

Features:

  • Three security modes: Full Disable, Guest Disable, or Selective Blocking
  • Blocks dangerous methods: system.multicall, pingback.ping, and more
  • Compatible with Jetpack and WooCommerce
  • Optional user enumeration blocking
  • Attack logging for monitoring
  • Zero configuration required – works out of the box
  • Clean, intuitive admin interface

Read the full description on the official page →

Tagged as

purpose Mobile & AMP Security & Malware Protection
platform WooCommerce
feature Mobile App / PWA
topic Security Xmlrpc Jetpack Xml-rpc Mobile App

Alternatives

Other plugins for mobile experience.

Ad Inserter

Ad Inserter

94

Manage Google AdSense ads, banners, ad rotation, sticky widgets, AMP ads, ads.txt, tracking, header and footer...

Free 300k+ installs 4.9★ (2,428)
Post SMTP

Post SMTP

89

Improve WordPress email deliverability. Connect Gmail SMTP, Microsoft 365, Brevo, SendGrid, Mailgun, Zoho, Ama...

Free 300k+ installs 4.7★ (525)
ECS

ECS

88

Seven free modules for Elementor: dark mode, container layouts, mobile menu, editorial text, style presets, JS...

Free 100k+ installs 4.6★ (117)
AMP for WP

AMP for WP

86

AMP for WP is the most recommended AMP plugin by the community. Automatically add Accelerated Mobile Pages (Go...

Free 70k+ installs 4.4★ (1,317)
Responsive Menu

Responsive Menu

86

Mobile menu & hamburger menu builder for WordPress. Create a responsive, customisable menu with 150+ optio...

Free 70k+ installs 4.5★ (572)
Super Progressive Web Apps

Super Progressive Web Apps

86

SuperPWA helps you convert your WordPress website into a Progressive Web App instantly.

Free 40k+ installs 4.6★ (225)