Description
Stops abuse of your sites XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.
This is more friendly than disabling totally XML-RPC, that its needed by some plugins and apps (I.e. Mobile apps or some Jetpacks modules).
- The original one.
- Simple and effective.
- No marketing buzz.
- Maintained and updated when needed since 2014.
- 100% compliant with WordPress coding standards which makes it fail safe.
- 70,000+ active installations cant be wrong.
If youre happy with the plugin please dont forget to give it a good rating, it will motivate me to keep sharing and improving this plugin (and others).
Features
Removes the following methods from XML-RPC interface.
- pingback.ping
- pingback.extensions.getPingbacks
- X-Pingback from HTTP headers. This will hopefully stops some bots from trying to hit your xmlrpc.php file.
Requirements
- WordPress 3.8.1 or higher.
Installation
- Extract the zip file and just drop the contents in the
wp-content/plugins/
directory of your WordPress installation (or install it directly from your dashboard) and then activate the plugin from Plugins page. - Theres not options page, simply install and activate.