Manage XML-RPC

plugin banner

Enable/Disable XML-RPC for all / specific IPs / disable for specific IPs

Author:brainvireinfo (profile at
WordPress version required:4.0
WordPress version tested:6.0.7
Plugin version:1.0
Added to WordPress repository:02-06-2016
Last updated:14-06-2022
Rating, %:60
Rated by:4
Plugin URI:
Total downloads:45 892
Active installs:8 000+
plugin download
Click to start download

You can now disable XML-RPC to avoid Brute force attack for given IPs or can even enable access for some IPs. XML-RPC on WordPress is actually an API that gives developers who build mobile apps, desktop apps and other services, the ability to talk to a WordPress site. The XML-RPC API that WordPress provides gives developers, a way to write applications (for you) that can do many of the things that you can do when logged into WordPress via the web interface.


Block XML-RPC by following way.

  • Disable, pingback.extensions.getPingbacks and Unset X-Pingback from HTTP headers, that will block bots to access specified method.
  • Disable/Block XML-RPC for all users.
  • Enable XML-RPC based on IP list.
  • Disable XML-RPC based on IP list.