Fixora Disable XML-RPC
Fixora Disable XML-RPC helps you disable xml-rpc, disable xmlrpc abuse, and reduce pingback exposure on your WordPress site. Disable XML-RPC entirely — turns off XML-RPC and blocks direct access to xmlrpc.php (unless Jetpack is allowed). Blocked-attempt log — records blocked XML-RPC requests (time,
Fixora Disable XML-RPC helps you disable xml-rpc, disable xmlrpc abuse, and reduce pingback exposure on your WordPress site.
- Disable XML-RPC entirely — turns off XML-RPC and blocks direct access to xmlrpc.php (unless Jetpack is allowed).
- Blocked-attempt log — records blocked XML-RPC requests (time, remote IP, and method name only). View the count and recent entries under Settings → Fixora Disable XML-RPC . Stores up to the last 50 entries in a single option.
- Remove X-Pingback and pingback link discovery — when protection is active.
- Pingback-only mode — blocks only pingback.ping while leaving other XML-RPC methods available.
- Allow Jetpack — optional checkbox so Jetpack can keep using XML-RPC when the plugin is active.
- Admin status check — requests xmlrpc.php from the settings screen and reports whether it appears blocked.
This plugin does not provide firewall lists or additional hardening beyond the features above.
Screenshots & previews.
- 01Upload the fixora-disable-xml-rpc folder to /wp-content/plugins/ .