#109 by installs
SiteGuard WP Plugin
Adds WordPress login and admin protections, including CAPTCHA, login lock, login alerts, renamed login URLs, and SiteGuard WAF tuning support.
- Installs
- 600,000+
- Rating
- 4.3 (15)
- Updated
- 4 days ago
Disable XML-RPC Pingback
Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
- Active installs
- 60,000+
- #667 of 1,000
- Downloads, all time
- 434.1K
- 434,112
- Downloads, 30 days
- 2.6K
- 598 in the last 7
- Rating
- 3.9 / 5
- 14 reviews
- Last updated
- 11 months ago
- Nov 24, 2025
- Version
- 1.2.2
- 6 releases
Upkeep and compatibility
| Last updated | November 24, 2025Updated in the last year |
|---|---|
| Tested up to | WordPress 6.8.12Older than WordPress 7.1.4, the current release |
| Needs WordPress | 4.8 or newer |
| Needs PHP | 5.6 or newer |
| First published | March 11, 2014 |
| Support, last two months | No threads opened |
Reviews
3.9 / 5 from 14 reviews
| 5 stars | 10 |
|---|---|
| 4 stars | 0 |
| 3 stars | 0 |
| 2 stars | 0 |
| 1 star | 4 |
Downloads, last 30 days
What the author says it does
Stops abuse of your site’s XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
This is more friendly than disabling totally XML-RPC, that it’s needed by some plugins and apps (I.e. Mobile apps or some Jetpack’s modules).
- The original one.
- Simple and effective.
- No marketing buzz.
- Maintained and updated when needed since 2014.
- 100% compliant with WordPress coding standards which makes it fail safe.
- 60,000+ active installations can’t be wrong.
If you’re happy with the plugin please don’t forget to give it a good rating, it will motivate me to keep sharing and improving this plugin (and others).
Features
Removes the following methods from XML-RPC interface.
- pingback.ping
- pingback.extensions.getPingbacks
- X-Pingback from HTTP headers. This will hopefully stops some bots from trying to hit your xmlrpc.php file.
Requirements
- WordPress 3.8.1 or higher.
The opening of the plugin's own description. The full text, installation notes and changelog are on its WordPress.org page.
Latest changelog entry
- Improved WP version checking to avoid a notice under certain versions of WP.
Tagged
Plugins that share its tags
#227 by installs
Cloudflare
All of Cloudflare’s performance and security benefits in a simple one-click install.
- Installs
- 200,000+
- Rating
- 3.5 (181)
- Updated
- 26 days ago
#323 by installs
XML Sitemap & Google News
Take control of your WordPress core XML Sitemap and add a Google News Sitemap.
- Installs
- 100,000+
- Rating
- 4.4 (85)
- Updated
- 5 months ago
Easily import any file of any size into any plugin, post type, custom field, or taxonomy. Supports WooCommerce, ACF, images, galleries, users, real es …
- Installs
- 100,000+
- Rating
- 4.7 (2K)
- Updated
- 11 days ago
#388 by installs
Disable XML-RPC-API
A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
- Installs
- 100,000+
- Rating
- 4.2 (43)
- Updated
- 9 months ago
Where this page's numbers come from
Read from the WordPress.org plugin API on , when WordPress 7.1.4 was the current release. WordPress.org rounds active installs into buckets. These are the directory's figures, not my verdict, and I haven't tested this plugin.