{"id":644,"date":"2012-09-28T18:29:49","date_gmt":"2012-09-28T18:29:49","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/disable-xml-rpc\/"},"modified":"2025-12-03T01:28:38","modified_gmt":"2025-12-03T01:28:38","slug":"disable-xml-rpc","status":"publish","type":"plugin","link":"https:\/\/ast.wordpress.org\/plugins\/disable-xml-rpc\/","author":5069822,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.0.1","stable_tag":"1.0.1","tested":"6.9.4","requires":"3.5","requires_php":"","requires_plugins":null,"header_name":"Disable XML-RPC","header_author":"Philip Erb","header_description":"","assets_banners_color":"","last_updated":"2025-12-03 01:28:38","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"http:\/\/www.philerb.com\/wp-plugins\/","header_author_uri":"http:\/\/www.philerb.com","rating":4.3,"author_block_rating":0,"active_installs":200000,"downloads":613506,"num_ratings":29,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0":{"tag":"1.0","author":"philerb","date":"2015-02-05 19:12:45"},"1.0.1":{"tag":"1.0.1","author":"philerb","date":"2025-12-03 01:28:38"}},"upgrade_notice":{"1.0.1":"<ul>\n<li>Blank lines removed from the plugin file.<\/li>\n<\/ul>"},"ratings":{"1":5,"2":0,"3":0,"4":0,"5":24},"assets_icons":[],"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0","1.0.1"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":2561895,"resolution":"1","location":"assets","locale":""},"screenshot-2.png":{"filename":"screenshot-2.png","revision":2561895,"resolution":"2","location":"assets","locale":""},"screenshot-3.png":{"filename":"screenshot-3.png","revision":2561895,"resolution":"3","location":"assets","locale":""}},"screenshots":{"1":"An example of the error that the WordPress mobile app will return when this plugin is enabled. This is expected and indicates that the plugin is working as intended.","2":"An example of a curl command attempting to request data via XML-RPC calls to the site when the plugin is enabled. The error \"XML-RPC services are disabled on this site\" is expected and indicates that the plugin is working as intended.","3":"An example of the XML-RPC validator run against the site when the plugin is enabled. The error \"Method not allowed\" is expected and indicates that the plugin is working as intended."},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[14731],"plugin_category":[],"plugin_contributors":[78267,78266],"plugin_business_model":[],"class_list":["post-644","plugin","type-plugin","status-publish","hentry","plugin_tags-xmlrpc","plugin_contributors-philerb","plugin_contributors-solvethenet","plugin_committers-philerb"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/disable-xml-rpc.svg","icon_2x":false,"generated":true},"screenshots":[{"src":"https:\/\/ps.w.org\/disable-xml-rpc\/assets\/screenshot-1.png?rev=2561895","caption":"An example of the error that the WordPress mobile app will return when this plugin is enabled. This is expected and indicates that the plugin is working as intended."},{"src":"https:\/\/ps.w.org\/disable-xml-rpc\/assets\/screenshot-2.png?rev=2561895","caption":"An example of a curl command attempting to request data via XML-RPC calls to the site when the plugin is enabled. The error \"XML-RPC services are disabled on this site\" is expected and indicates that the plugin is working as intended."},{"src":"https:\/\/ps.w.org\/disable-xml-rpc\/assets\/screenshot-3.png?rev=2561895","caption":"An example of the XML-RPC validator run against the site when the plugin is enabled. The error \"Method not allowed\" is expected and indicates that the plugin is working as intended."}],"raw_content":"<!--section=description-->\n<p>Pretty simply, this plugin uses the built-in WordPress filter \"xmlrpc_enabled\" to disable the XML-RPC API on a WordPress site running 3.5 or above.<\/p>\n\n<p>Beginning in 3.5, XML-RPC is enabled by default. Additionally, the option to disable\/enable XML-RPC was removed. For various reasons, site owners may wish to disable this functionality. This plugin provides an easy way to do so.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the disable-xml-rpc directory to the <code>\/wp-content\/plugins\/<\/code> directory in your WordPress installation<\/li>\n<li>Activate the plugin through the 'Plugins' menu in WordPress<\/li>\n<li>The WordPress XML-RPC methods are now disabled!<\/li>\n<\/ol>\n\n<p>To re-enable XML-RPC, just deactivate the plugin through the 'Plugins' menu.<\/p>\n\n<p>View the FAQ about \"How do I know if the plugin is working?\" to verify that this is working as intended.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id='is%20there%20an%20admin%20interface%20for%20this%20plugin%3F'><h3>Is there an admin interface for this plugin?<\/h3><\/dt>\n<dd><p>No. This plugin is as simple as XML-RPC is off (plugin activated) or XML-RPC is on (plugin is deactivated).<\/p><\/dd>\n<dt id='how%20do%20i%20know%20if%20the%20plugin%20is%20working%3F'><h3>How do I know if the plugin is working?<\/h3><\/dt>\n<dd><p>There are a few easy methods for checking if XML-RPC is off:<\/p>\n\n<ol>\n<li>Try using an XML-RPC WordPress client, like the official WordPress mobile apps. The WordPress mobile app should tell you that \"XML-RPC services are disabled on this site\" if the plugin is activated.<\/li>\n<li>Use the curl command to send an XML-RPC request to your site. If the response contains \"XML-RPC services are disabled on this site\" then the plugin is working properly and WordPress will not send data back to XML-RPC requests.<\/li>\n<li>Try the XML-RPC Validation Service for WordPress - the tool is available at <a href=\"https:\/\/xmlrpc.blog\/\">https:\/\/xmlrpc.blog\/<\/a>. Keep in mind that you want the validator to fail and tell you that XML-RPC services are disabled.<\/li>\n<\/ol>\n\n<p>See the screenshots for examples of what these tools will return when the plugin is enabled.<\/p><\/dd>\n<dt id='something%20doesn%27t%20seem%20to%20be%20working%20correctly'><h3>Something doesn't seem to be working correctly<\/h3><\/dt>\n<dd><p>If the plugin is activated, but XML-RPC appears to still be working ... OR ... the plugin is deactivated, but XML-RPC is not working, then it's possible that another plugin or theme function is affecting the xmlrpc_enabled filter. Additionally, server configurations could be blocking XML-RPC (i.e. blocking access to xmlrpc.php in the .htaccess file).<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Blank lines removed from the plugin file.<\/li>\n<\/ul>\n\n<h4>1.0<\/h4>\n\n<ul>\n<li>Initial release<\/li>\n<\/ul>","raw_excerpt":"Disables the XML-RPC API in WordPress 3.5+, which is enabled by default.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/644","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=644"}],"author":[{"embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/philerb"}],"wp:attachment":[{"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=644"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=644"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=644"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=644"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=644"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/ast.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=644"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}