/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Remove XML-RPC Methods

Remove XML-RPC Methods

By Walter Ebert

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Remove XML-RPC Methods Review - In-Depth Analysis

This plugin removes all WordPress methods from the XML-RPC API to enhance security. It disables pingbacks, trackbacks, and Really Simple Discovery.

Performance Overview

WPS Score

6.75/10

User Rating

5/5 (based on 3+ reviews)

Active Installations

1,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin removes all WordPress methods from the XML-RPC API to enhance security. It does more than just using the xmlrpc_enabled hook, because that is only used to disable XML-RPC methods that require authentication.

Activating this plugin will also disable pingbacks, trackbacks, and Really Simple Discovery (RSD), because these rely on XML-RPC.

It works with any webserver, because it does not use the .htaccess file.

From the command line, you can test if the plugin is working correctly using curl. Replace the example.com link to match your website.

Comparing to Alternatives

Remove XML-RPC Methods is one of several plugins designed to disable or manage XML-RPC functionality in WordPress, helping to reduce security risks associated with this feature.

Top alternatives

Strengths

Maintains up-to-date compatibility with WordPress.
Effectively disables XML-RPC methods as intended.
Carefully manages related Discussion settings by saving and restoring original values.
Lightweight and straightforward to use.
No known security vulnerabilities.

Weaknesses

Modifies Discussion settings which may be unexpected to some users.
Limited to disabling XML-RPC without additional security features.
No premium version with extended functionality.

User Sentiment Analysis

All user reviews are positive with a perfect 5-star rating, reflecting strong satisfaction and reliability.

Positive highlights

'The only one up-to-date' - Al-Mothafar Al-Hasan
'Seems to work as expected.' - brondsem
'works' - muhaos

Common complaints

Weaknesses

Alters Discussion settings which may surprise users.
Lacks advanced features beyond disabling XML-RPC.

Who Should Use This?

Best for

Users seeking a simple, reliable plugin to disable XML-RPC methods without extra complexity.

Not ideal for

Those wanting a plugin with broader security features or who prefer not to have any automatic changes to Discussion settings.

Pricing & Value

Free version includes

The free version fully disables XML-RPC methods and manages related settings carefully.

Final Verdict

Remove XML-RPC Methods is a focused and effective plugin that excels at disabling XML-RPC functionality while maintaining compatibility and careful handling of related settings. Its perfect user ratings and absence of security vulnerabilities make it a trustworthy choice for users concerned about XML-RPC security.

While it lacks advanced features and a premium version, its simplicity and reliability set it apart among alternatives. Users should be aware of its automatic changes to Discussion settings but will appreciate its straightforward approach and consistent performance.