/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Remove & Disable XML-RPC Pingback

Remove & Disable XML-RPC Pingback

By cleverplugins

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Remove & Disable XML-RPC Pingback Review - In-Depth Analysis

This plugin disables XML-RPC pingback functionality to prevent DDoS attacks. It lowers server CPU usage and protects your site from malicious scripts.

Performance Overview

WPS Score

6.89/10

User Rating

3/5 (based on 6+ reviews)

Active Installations

7,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin helps protect your WordPress site from participating in pingback denial of service attacks. After activation, the plugin automatically disables XML-RPC without requiring any configuration.

By disabling the XML-RPC pingback, you will lower your server CPU usage and prevent malicious scripts from using your site to run pingback denial of service attacks. This also protects your site from being targeted by such attacks.

Pingback functionality is enabled by default on WordPress sites, which can be exploited for DDoS attacks against other sites. This plugin is a simple solution to mitigate that risk while allowing the use of other plugins that rely on XML-RPC functionality.

Comparing to Alternatives

Remove & Disable XML-RPC Pingback is one of several plugins aimed at disabling XML-RPC pingbacks to enhance WordPress security. It faces competition from multiple alternatives that offer similar functionality with varying features.

Top alternatives

Strengths

Simple and lightweight plugin with minimal impact on site speed and memory usage
Easy to install and use without complex configuration
Effectively disables XML-RPC pingback functionality in many cases
No known security vulnerabilities reported
Free to use without a paid version

Weaknesses

Some users report it is no longer effective against attacks
Persistent admin notices promoting newsletters can be annoying
Does not prevent all login attempts or brute force attacks
Lacks advanced features or customization options

User Sentiment Analysis

User reviews are polarized with half giving 5 stars praising its simplicity and effectiveness, while the other half give 1 star citing ineffectiveness and intrusive admin notices.

Positive highlights

Great plugin, super easy to install and just sits there doing its job. Very light as well, so has no effects that I could see, on site speed or memory usage. (Ben Roberts)
Great plugin, helped me a lot! (kayasch)
Just what I needed, very straightforward and effective. (Ben Roberts)

Common complaints

Plugin is no longer effective in preventing attacks on some sites (skyhound)
Still receiving many login attempts despite plugin installation (Kekeli)
Excessive and annoying admin notices promoting newsletters in WP admin (mklusak)

Weaknesses

Effectiveness has declined over time according to some users
Annoying admin notices can disrupt user experience
Does not fully stop brute force login attempts

Who Should Use This?

Best for

Users seeking a lightweight, easy-to-use plugin to disable XML-RPC pingbacks without advanced features or paid options.

Not ideal for

Users needing robust protection against brute force attacks or those who dislike frequent admin notices and require more comprehensive security solutions.

Pricing & Value

Free version includes

The free version disables XML-RPC pingback functionality and is sufficient for basic protection needs.

Final Verdict

Remove & Disable XML-RPC Pingback offers a simple and lightweight solution for disabling XML-RPC pingbacks, with no known security vulnerabilities and positive feedback on ease of use and minimal resource impact. However, its effectiveness appears to have diminished for some users, and intrusive admin notices detract from the overall experience.

While it is a good choice for users wanting a straightforward free plugin, those requiring stronger security measures or a cleaner admin interface may want to consider alternative plugins with more features or better ongoing support.