The FinderPress tool directory
WordPress plugin
Deactivate XML-RPC on WordPress
This plugin will completely disable or deactivate XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website using XML-RPC. By using the plugin, it will remove your ability to post using XML-RPC protocol, which means no more, post ping backs, remote post from W
PricingFree downloadThe WordPress.org download is free. Pro versions, add-ons or external services may cost extra.
CompatibilityRequires WordPress 3.5.
SourceWordPress plugins · Nov 13, 2026
01 / Source details
This plugin will completely disable or deactivate XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website using XML-RPC.
By using the plugin, it will remove your ability to post using XML-RPC protocol, which means no more,
- post ping backs,
- remote post from WordPress mobile app,
- remote post from windows live writer,
- and other applications that requires XML-RPC.
02 / Source details
- 01Upload deactivate-xml-rpc folder to the /wp-content/plugins/ directory
- 02Activate the plugin through the ‘Plugins’ menu in WordPress
- 03That’s it XML-RPC is now deactivated
03 / Source details
Frequently asked questions.
How to check if XML-RPC is really deactivated?
You can check your installation via a WordPress XML-Validator service at this URL: http://xmlrpc.eritreo.it/
Keep exploring
