Directory / plugin
Fixora Disable XML-RPC
v1.0.1 · by Fixora Labs
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
About this plugin
Fixora Disable XML-RPC helps you disable xml-rpc, disable xmlrpc abuse, and reduce pingback exposure on your WordPress site.
- Disable XML-RPC entirely — turns off XML-RPC and blocks direct access to
xmlrpc.php(unless Jetpack is allowed). - Blocked-attempt log — records blocked XML-RPC requests (time, remote IP, and method name only). View the count and recent entries under Settings Fixora Disable XML-RPC. Stores up to the last 50 entries in a single option.
- Remove X-Pingback and pingback link discovery — when protection is active.
- Pingback-only mode — blocks only
pingback.pingwhile leaving other XML-RPC methods available. - Allow Jetpack — optional checkbox so Jetpack can keep using XML-RPC when the plugin is active.
- Admin status check — requests
xmlrpc.phpfrom the settings screen and reports whether it appears blocked.
This plugin does not provide firewall lists or additional hardening beyond the features above.