Directory / plugin
Disable XML-RPC & Unset X-Pingback
v1.0 · by Swellfire
This plugin disables XML-RPC API in WordPress 3.5+, which is enabled by default.
About this plugin
This plugin disables the XML-RPC API on a WordPress site running 3.5 or above and unsets the X-Pingback header.
Beginning in 3.5, XML-RPC is enabled by default. Additionally, the option to disable/enable XML-RPC was removed. For various reasons, site owners may wish to disable this functionality. This plugin provides an easy way to do so.