/ Plugin Category

/ Security & Privacy

/ Security Scanning & Malware Protection

/ Disable XML-RPC

Disable XML-RPC

By Phil Erb

Security & Privacy / Security Scanning & Malware Protection

Disable XML-RPC Review - In-Depth Analysis

Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.

Performance Overview

WPS Score

6.82/10

User Rating

4.3/5 (based on 30+ reviews)

Active Installations

200,000+

Update Frequency

Below Average It is calculated using the weighted average of same category plugins.

Security Score

1 / 10 (Very Low Risk) It is calculated using the weighted average of all versions.

What It Does

This plugin uses the built-in WordPress filter 'xmlrpc_enabled' to disable the XML-RPC API on a WordPress site running 3.5 or above.

Beginning in 3.5, XML-RPC is enabled by default. Additionally, the option to disable/enable XML-RPC was removed. For various reasons, site owners may wish to disable this functionality. This plugin provides an easy way to do so.

Comparing to Alternatives

Disable XML-RPC is a straightforward plugin designed to disable XML-RPC functionality in WordPress, helping to improve security by blocking potential attack vectors. Compared to similar plugins, it focuses solely on disabling XML-RPC without additional features.

Top alternatives

Strengths

Simple and easy to use with minimal configuration.
No adware or unnecessary features included.
Effectively disables XML-RPC on supported WordPress versions.

Weaknesses

Some users report it does not work on the latest WordPress versions.
Lacks advanced management features found in alternatives.
No updates or support for newer WordPress releases.
No pro version or extended functionality available.

User Sentiment Analysis

User feedback on Disable XML-RPC is mixed, with some praising its simplicity and effectiveness, while others report compatibility issues with recent WordPress versions.

Positive highlights

"Works perfect and is easy to use" - charmingdoggo
"No adware" - tomhung
"Dead simple as it should be. Nice, thank you for that." - art-at-tec
"Perfect plugin on updated WP version" - zaririnatma

Common complaints

Does not work with WordPress 6.4.2 as reported by some users.
Some users experienced it not working at all on certain versions.
Limited functionality compared to other XML-RPC management plugins.

Weaknesses

Inconsistent performance across different WordPress versions.
No ongoing updates to address compatibility issues.
Lack of support or troubleshooting guidance.

Who Should Use This?

Best for

Users seeking a no-frills, lightweight solution to disable XML-RPC on WordPress sites running compatible versions.

Not ideal for

Users needing advanced XML-RPC management, support for the latest WordPress versions, or additional security features should consider alternatives.

Pricing & Value

Free version includes

The free version fully disables XML-RPC functionality without any ads or bundled extras, providing basic protection at no cost.

Final Verdict

Disable XML-RPC offers a simple and effective way to disable XML-RPC on WordPress sites, especially for users on compatible versions who want a lightweight plugin without extra features.

However, its lack of updates and reported compatibility issues with recent WordPress releases limit its reliability, making it less suitable for users needing ongoing support or advanced functionality.