Disable XML-RPC Pingback

Wordpress Plugin
Download latest - 1.2.2

Developers

samuelaguilera

Download Stats

Today 48
Yesterday 66
Last Week 452
All Time 104,524
Banner 772x250

Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.

This is more friendly than disabling totally XML-RPC, that it's needed by some plugins and apps (I.e. Mobile apps or some Jetpack's modules).

  • The original one.
  • Simple and effective.
  • No marketing buzz.
  • Maintained and updated when needed since 2014.
  • 100% compliant with WordPress coding standards which makes it fail safe.
  • 70,000+ active installations can't be wrong.

If you're happy with the plugin please don't forget to give it a good rating, it will motivate me to keep sharing and improving this plugin (and others).

Features

Removes the following methods from XML-RPC interface.

  • pingback.ping
  • pingback.extensions.getPingbacks
  • X-Pingback from HTTP headers. This will hopefully stops some bots from trying to hit your xmlrpc.php file.

Requirements

  • WordPress 3.8.1 or higher.

Releases (5 )

Version Release Date Change Log
1.2.2 2021-05-13
  • Improved WP version checking to avoid a notice under certain versions of WP.
1.2.1 2019-07-28
  • Minor changes to make code 100% compliant with WordPress Coding Standards.
1.2 2019-03-30
  • Added support for X-Pingback header removal in recent versions of WP.
1.1 2017-11-06
  • Added code to remove X-Pingback from HTTP headers as suggested by user https://wordpress.org/support/topic/remove-x-pingback-http-header
1.0 2014-10-03
  • Initial release.