Remove XML-RPC Methods
by Walter Ebert · Security
Remove all WordPress methods from the XML-RPC API to increase security.
84 health vs 64 average across 997 Security plugins
Directory ranking optimization
How it's scored →How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.
Excellent listing optimization
Biggest win: Rating quality
To rank higher: Too few reviews to rank on quality — nudge happy users to leave one.
Get the full rank-higher report →Daily downloads
Since 2022-10-05 · 1,426 days · wp.org + Plugin Pulse archive
30-day downloads
Rolling 30-day volume · peaks are release surges
349
now · peak 1.4K
Directory rank vs rivals
wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you
Update activity
How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.
Release cadence
Occasionally updatedHow often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.
2
releases in the last 12 months
5mo ago
latest release · v1.4.2
9
tagged releases on record
Recent releases
What its installed base runs
via wordpress.orgShare of active installs on each version of this plugin · 100% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.
Estimated active installs
The public count shows “1K+”. Our estimate pins where the real number sits.
Refined from the date this plugin crossed into its current band.
Install history · since 2020-09-21 · 1,425 observations
Estimated value
What this plugin might earn a year, and what it might sell for. Modeled from public signals; we don't see anyone's books.
Est. annual revenue
Est. acquisition value
No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price. A small install base leaves thin data to model from.
Details
Behavioral tests
via WP HiveAutomated install-time checks, tested on PHP 8.1.12 · WP 7.0.1
Growth timeline
Install-tier crossings we have observed, and how long each tier took to outgrow
- 2023-03-29 700+ → 1K+ up after 50 days in tier
- 2023-02-07 600+ → 700+ up after 91 days in tier
- 2022-11-08 700+ → 600+ down after 14 days in tier
- 2022-10-25 600+ → 700+ up after 2 days in tier
- 2022-10-23 700+ → 600+ down after 1 days in tier
- 2022-10-22 600+ → 700+ up
Competes with
The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).
- C Control XML-RPC publishing 400+ installs · 4.1★ · 3 shared tags D
-
Remove & Disable XML-RPC Pingback 8K+ installs · 3.6★ · 2 shared tags D -
Stop XML-RPC Attacks 6K+ installs · 4.2★ · 2 shared tags A -
REST XML-RPC Data Checker 900+ installs · 4.1★ · 2 shared tags D -
WP Login Door 400+ installs · 4.3★ · 2 shared tags C -
Wordfence Security – Firewall, Malware Scan, and Login Security 5M+ installs · 4.7★ · 1 shared tag A
Embed this report card
Drop a live Pulse card for Remove XML-RPC Methods into a readme, a review or a deck. It updates itself.
<iframe src="https://plugins.wpmayor.com/embed/wee-remove-xmlrpc-methods" width="480" height="300" style="border:0" loading="lazy" title="Remove XML-RPC Methods — Plugin Pulse"></iframe> Remove XML-RPC Methods: 1K+ active installs, 5.0★ (2 reviews). Plugin Pulse (WP Mayor), as of 2026-08-30. https://plugins.wpmayor.com/plugin/wee-remove-xmlrpc-methods