Remove all methods from the WordPress XML-RPC API.
| Author: | Walter Ebert (profile at wordpress.org) |
| WordPress version required: | 4.6 |
| WordPress version tested: | 6.5 |
| Plugin version: | 1.4.0 |
| Added to WordPress repository: | 10-02-2020 |
| Last updated: | 17-03-2024 |
| Rating, %: | 100 |
| Rated by: | 1 |
| Plugin URI: | https://gitlab.com/walterebert/wee-remove-xml... |
| Total downloads: | 6 505 |
| Active installs: | 1 000+ |
 Click to start download |
|
The plugin removes all methods from the WordPress XML-RPC API. It is an alternative to just using the xmlrpc_enabled hook, because that is only used “To disable XML-RPC methods that require authentication”.
Activating this plugin will disable pingbacks and trackbacks, because these rely on XML-RPC.
Testing the plugin
From the command line you can test if the plugin is working correctly using cURL:
curl -d '<?xml version="1.0"?><methodCall><methodName>system.listMethods</methodName><params><param><value><string/></value></param></params></methodCall>' https://<your domain>/xmlrpc.php
This should only return system methods.
If the request returns methods starting with wp. the plugin is not active.
ChangeLog