/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Disable XML-RPC Pingback

Disable XML-RPC Pingback

By Samuel Aguilera

Security & Privacy / Security Scanning & Malware Protection

Reviewed by Omar Dabbas

Trusted WordPress expert with 20+ years of experience evaluating plugins for the WP ecosystem.

Disable XML-RPC Pingback Review - In-Depth Analysis

This plugin stops abuse of XML-RPC by removing methods used by attackers while keeping other functionalities intact. It is simple, effective, and compliant with WordPress coding standards.

Performance Overview

WPS Score

7.2/10

User Rating

3.9/5 (based on 14+ reviews)

Active Installations

60,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods, this is more friendly than disabling it totally, as it is needed by some plugins and apps, like mobile apps or some Jetpack modules.

The plugin is simple and effective, with no marketing buzz. It has been maintained and updated when needed since 2014. It is 100% compliant with WordPress coding standards, making it fail-safe. With over 60,000 active installations, it has proven to be reliable.

If you're happy with the plugin, please don't forget to give it a good rating, as it will motivate the developer to keep sharing and improving this plugin and others.

Key features include the removal of specific methods from the XML-RPC interface, such as pingback.ping, pingback.extensions.getPingbacks, and the X-Pingback from HTTP headers. This aims to stop some bots from trying to hit your xmlrpc.php file.

Requirements include WordPress version 3.8.1 or higher.

Comparing to Alternatives

Disable XML-RPC Pingback is one of several plugins designed to mitigate XML-RPC related security issues. It competes with a number of alternatives that offer similar functionality with varying approaches and update frequencies.

Top alternatives

Strengths

Effectively blocks XML-RPC pingback attacks as intended
Simple and lightweight with minimal configuration
Free to use with no paid upgrade required
Maintained by an engaged author who updates when necessary
Good user ratings from those who find it effective

Weaknesses

Has not been updated frequently, leading to concerns about ongoing maintenance
Reports of site breakage after installation from some users
Limited features compared to some alternatives
Some users recommend other plugins as better options

User Sentiment Analysis

With a 3.9 rating from 14 reviews, most users rate this plugin highly, praising its effectiveness and simplicity. However, a notable minority report serious issues, including site breakage and lack of recent updates.

Positive highlights

'Does what it says and this is what needed for a XMLRPC attacks.' - gmyoganand
'Thank you for this free and great plugin.' - wplike75
'Gran trabajo Samuel, en combinación con algunas reglas de htaccess hace un trabajo fantástico.' - Fernando Tellado
'The plugin author is still actively engaged with this excellently useful plugin.' - Gordon

Common complaints

Plugin has not been updated for over a year, raising concerns about maintenance
Installation caused site breakage requiring restoration from backup

Weaknesses

Infrequent updates may affect compatibility with latest WordPress versions
Potential risk of site instability after activation
Limited feature set compared to some competitors

Who Should Use This?

Best for

Users seeking a straightforward, free solution to disable XML-RPC pingback functionality without needing frequent updates or advanced features.

Not ideal for

Users who require a plugin with frequent updates, extensive features, or who cannot risk potential site instability during installation.

Pricing & Value

Free version includes

The free version disables XML-RPC pingback functionality effectively with no additional features.

Final Verdict

Disable XML-RPC Pingback is a simple and effective plugin for blocking XML-RPC pingback attacks, favored by many users for its ease of use and free availability. However, its infrequent updates and reports of site breakage suggest caution for those with critical sites or who prefer actively maintained plugins.

While there are several alternatives offering similar or enhanced features, this plugin remains a viable choice for users prioritizing minimalism and straightforward functionality without a paid upgrade option.