Disable XML-RPC Pingback

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

Share of active installs on each version of this plugin · 95% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

Most reviewers say it does exactly what it promises against XML-RPC pingback attacks and still works years later, though a couple report it didn't block anything on their setup or broke their site.

1. ★★★★★ Gordon

   10mo ago

   The plugin author is still actively engaged with this excellently useful plugin. It receives updates only when needed which might be years in between updates. Still works great! Highly recommend.

   Read on wp.org ↗
2. ★★★★★ morti037

   5.3y ago

   There is better option than this plugin. I have used disable xmlrpc api and its works fine for me.

   Read on wp.org ↗
3. ★★★★★ captainzandra

   5.9y ago

   This broke my site, I had to revert to a backup on the server after installing it.

   Read on wp.org ↗
4. ★★★★★ Fernando Tellado

   9.6y ago

   Gran trabajo Samuel, en combinación con algunas reglas de htaccess hace un trabajo fantástico.

   Read on wp.org ↗
5. ★★★★★ wplike75

   9.8y ago

   Thank you for this free and great plugin.

   Read on wp.org ↗
6. ★★★★★ gmyoganand

   10.2y ago

   Does what it says and this is what needed for a XMLRPC attacks. Thanks.

   Read on wp.org ↗
7. ★★★★★ yolandal

   10.3y ago

   I’m confused here… I see this plugin I’ve never heard of and I never installed… and the bad thing is; I can’t remove it! If this is a security plugin it sure doesn’t behave like it! It’s behaviour is a no-go for me. Update: My hosting provider admittd they have installed this plugin. But they never notified me. So now I’m giving a 5 star rating.

   Read on wp.org ↗
8. ★★★★★ zoxee

   11.0y ago

   Doesn’t work on 4.2.4. For testing purposes i installed 2 plugins to compare : 1. Disable XML-RPC Pingback from Samuel Aguilera 2. Disable XML-RPC from Philipp Erb When 1 is activated, i am still able to post articles from 3 different applications. When 2 is activated, i get following message in all 3rd party applications : “XML-RPC services are disabled on this site” Samuel, instead of insulting people you should update you plugin.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 1.2.2 Improved WP version checking to avoid a notice under certain versions of WP. 1.2.2
2. — Version 1.2.1 Minor changes to make code 100% compliant with WordPress Coding Standards. 1.2.1
3. — Version 1.2 Added support for X-Pingback header removal in recent versions of WP. 1.2
4. — Version 1.1 Added code to remove X-Pingback from HTTP headers as suggested by user https://wordpress.org/support/topic/remove-x-pingback-http-header 1.1
5. — Version 1.0 Initial release. 1.0

Automated install-time checks, tested on PHP 7.4.8 · WP 5.7.2

Translated into 15 languages, 15 at 90% or more

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2024-05-18 70K+ → 60K+ down after 12 days in tier
2. 2024-05-06 60K+ → 70K+ up after 84 days in tier
3. 2024-02-12 70K+ → 60K+ down

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Simple XML-RPC Disabler 20+ installs · 3.6★ · 4 shared tags D
• Simple XML-RPC Pingback Disabler 10+ installs · 3.6★ · 4 shared tags D
• Remove & Disable XML-RPC Pingback 8K+ installs · 3.6★ · 2 shared tags D
• Eazy XMLRPC Pingback Disable 700+ installs · 4.2★ · 2 shared tags D
• D Deactivate XML-RPC on WordPress 200+ installs · 3.6★ · 2 shared tags D
• SiteGuard WP Plugin 500K+ installs · 4.1★ · 1 shared tag A

Embed this report card

Drop a live Pulse card for Disable XML-RPC Pingback into a readme, a review or a deck. It updates itself.

Disable XML-RPC Pingback: 60K+ active installs, 3.9★ (14 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/disable-xml-rpc-pingback