Title: Disable XML-RPC Author: Phil Erb Published: 28 сентября, 2012 Last modified: 3 Желтоқсан, 2025 --- Search plugins ![](https://s.w.org/plugins/geopattern-icon/disable-xml-rpc.svg) # Disable XML-RPC By [Phil Erb](https://profiles.wordpress.org/philerb/) [Download](https://downloads.wordpress.org/plugin/disable-xml-rpc.1.0.1.zip) * [Details](https://kk.wordpress.org/plugins/disable-xml-rpc/#description) * [Reviews](https://kk.wordpress.org/plugins/disable-xml-rpc/#reviews) * [Installation](https://kk.wordpress.org/plugins/disable-xml-rpc/#installation) * [Development](https://kk.wordpress.org/plugins/disable-xml-rpc/#developers) [Support](https://wordpress.org/support/plugin/disable-xml-rpc/) ## Description Pretty simply, this plugin uses the built-in WordPress filter «xmlrpc_enabled» to disable the XML-RPC API on a WordPress site running 3.5 or above. Beginning in 3.5, XML-RPC is enabled by default. Additionally, the option to disable/ enable XML-RPC was removed. For various reasons, site owners may wish to disable this functionality. This plugin provides an easy way to do so. ## Screenshots * [[ * An example of the error that the WordPress mobile app will return when this plugin is enabled. This is expected and indicates that the plugin is working as intended. * [[ * An example of a curl command attempting to request data via XML-RPC calls to the site when the plugin is enabled. The error «XML-RPC services are disabled on this site» is expected and indicates that the plugin is working as intended. * [[ * An example of the XML-RPC validator run against the site when the plugin is enabled. The error «Method not allowed» is expected and indicates that the plugin is working as intended. ## Installation 1. Upload the disable-xml-rpc directory to the `/wp-content/plugins/` directory in your WordPress installation 2. Activate the plugin through the ‘Plugins’ menu in WordPress 3. The WordPress XML-RPC methods are now disabled! To re-enable XML-RPC, just deactivate the plugin through the ‘Plugins’ menu. View the FAQ about «How do I know if the plugin is working?» to verify that this is working as intended. ## FAQ ### Is there an admin interface for this plugin? No. This plugin is as simple as XML-RPC is off (plugin activated) or XML-RPC is on (plugin is deactivated). ### How do I know if the plugin is working? There are a few easy methods for checking if XML-RPC is off: 1. Try using an XML-RPC WordPress client, like the official WordPress mobile apps. The WordPress mobile app should tell you that «XML-RPC services are disabled on this site» if the plugin is activated. 2. Use the curl command to send an XML-RPC request to your site. If the response contains« XML-RPC services are disabled on this site» then the plugin is working properly and WordPress will not send data back to XML-RPC requests. 3. Try the XML-RPC Validation Service for WordPress — the tool is available at [https://xmlrpc.blog/](https://xmlrpc.blog/). Keep in mind that you want the validator to fail and tell you that XML-RPC services are disabled. See the screenshots for examples of what these tools will return when the plugin is enabled. ### Something doesn’t seem to be working correctly If the plugin is activated, but XML-RPC appears to still be working … OR … the plugin is deactivated, but XML-RPC is not working, then it’s possible that another plugin or theme function is affecting the xmlrpc_enabled filter. Additionally, server configurations could be blocking XML-RPC (i.e. blocking access to xmlrpc.php in the .htaccess file). ## Reviews ![](https://secure.gravatar.com/avatar/1cfcf90d1b2ccaef4526dcd46f00423b078740f1a59b91b053cc44419a64e3a0? s=60&d=retro&r=g) ### 󠀁[Reduced to perfection](https://wordpress.org/support/topic/reduced-to-perfection/)󠁿 [art-at-tec](https://profiles.wordpress.org/lrnz/) 9 апреля, 2024 Dead simple as it should be. Nice, thank you for that. ![](https://secure.gravatar.com/avatar/3ffbfd9999803af9690c86b072c98237faf492ffbcb50fc183cd9bc9dc2d588b? s=60&d=retro&r=g) ### 󠀁[Perfect plugin on updated WP version](https://wordpress.org/support/topic/perfect-plugin-on-updated-wp-version/)󠁿 [zaririnatma](https://profiles.wordpress.org/zaririnatma/) 10 Ақпан, 2024 It works perfectly on WordPress 6.4.3 (tested in 2 sites), without plugins conflict. See the tab FAQ to check that after instal, just test it on website quoted there:( xmlrpc-check) — if the test returns Fail on check xmlrpc the plugin worked. You can also run that test BEFORE instal the plugin to prove its work. ![](https://secure.gravatar.com/avatar/0dc94c3d1ce1767c84392a44fdfb5226693a57fe564d66e80f938022cdba5fe2? s=60&d=retro&r=g) ### 󠀁[Does not work with WordPress 6.4.2](https://wordpress.org/support/topic/does-not-work-with-wordpress-6-4-2/)󠁿 [kuzavas](https://profiles.wordpress.org/kuzavas/) 18 Қаңтар, 2024 1 reply Does not work with Wordpress 6.4.2, xmlrpc-check tool still shows «All XML-RPC methods are available on the server» ![](https://secure.gravatar.com/avatar/3226307eb43e39fa95fc54d34d8cb94ba413e6426120a6965e717b02a9dccdda? s=60&d=retro&r=g) ### 󠀁[Great Plugin](https://wordpress.org/support/topic/great-plugin-38168/)󠁿 [charmingdoggo](https://profiles.wordpress.org/charmingdoggo/) 19 Желтоқсан, 2023 Works perfect and is easy to use ![](https://secure.gravatar.com/avatar/22a59f9d7cc0dc9e95acbde8a91571dc3acc5b17757ac92eba95cfac26027b85? s=60&d=retro&r=g) ### 󠀁[No adware](https://wordpress.org/support/topic/no-adware/)󠁿 [tomhung](https://profiles.wordpress.org/tomhung/) 9 сентября, 2022 No adware ![](https://secure.gravatar.com/avatar/8626d285a2c7ac7cd4f72d196cf4b3685f214bf3561faaa9be4596c21ed95db7? s=60&d=retro&r=g) ### 󠀁[Not working (WP 5.8.3)](https://wordpress.org/support/topic/not-working-wp-5-8-3/)󠁿 [LeTraceurSnork](https://profiles.wordpress.org/letraceursnork/) 4 Ақпан, 2022 2 replies It just doesn’t working [ Read all 29 reviews ](https://wordpress.org/support/plugin/disable-xml-rpc/reviews/) ## Contributors & Developers “Disable XML-RPC” is open source software. The following people have contributed to this plugin. Contributors * [ Phil Erb ](https://profiles.wordpress.org/philerb/) * [ Solve the Net ](https://profiles.wordpress.org/solvethenet/) [Translate “Disable XML-RPC” into your language.](https://translate.wordpress.org/projects/wp-plugins/disable-xml-rpc) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/disable-xml-rpc/), check out the [SVN repository](https://plugins.svn.wordpress.org/disable-xml-rpc/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/disable-xml-rpc/) by [RSS](https://plugins.trac.wordpress.org/log/disable-xml-rpc/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.0.1 * Blank lines removed from the plugin file. #### 1.0 * Initial release ## Meta * Version **1.0.1** * Last updated **4 месяца ago** * Active installations **200 000+** * WordPress version ** 3.5 or higher ** * Tested up to **6.9.4** * Language * [English (US)](https://wordpress.org/plugins/disable-xml-rpc/) * Tag * [xmlrpc](https://kk.wordpress.org/plugins/tags/xmlrpc/) * [Advanced View](https://kk.wordpress.org/plugins/disable-xml-rpc/advanced/) ## Ratings 4.3 out of 5 stars. * [ 24 5-star reviews ](https://wordpress.org/support/plugin/disable-xml-rpc/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/disable-xml-rpc/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/disable-xml-rpc/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/disable-xml-rpc/reviews/?filter=2) * [ 5 1-star reviews ](https://wordpress.org/support/plugin/disable-xml-rpc/reviews/?filter=1) [Your review](https://wordpress.org/support/plugin/disable-xml-rpc/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/disable-xml-rpc/reviews/) ## Contributors * [ Phil Erb ](https://profiles.wordpress.org/philerb/) * [ Solve the Net ](https://profiles.wordpress.org/solvethenet/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/disable-xml-rpc/)