PluginScout

Stop XML-RPC Attacks — WordPress Security Plugin

by Pascal CESCATO · WordPress.org page

v2.0.0 Tested up to WP 7.1 PHP 7.4+

Stop XML-RPC Attacks has 6,000+ active installs on WordPress.org and 29,781 downloads all time. We have tracked it since September 4, 2026; download trends appear after 30 days of data. The last update was on August 27, 2026, tested up to WordPress 7.1.

Stop XML-RPC Attacks at a glance

Active installs
6,000+
Total downloads
29,781
Downloads, last 30 days
–
available after 30 days of tracking
30-day growth
–
tracking since September 4, 2026

Is Stop XML-RPC Attacks well maintained?

Support threads resolved
No open threads
nothing waiting on the WordPress.org forum
WordPress compatibility
Current
tested up to WordPress 7.1, the current release is 7.1

Features

The feature list from the plugin's own readme on WordPress.org, trimmed to the essentials.

  • Three security modes: Full Disable, Guest Disable, or Selective Blocking
  • Blocks dangerous methods: system.multicall, pingback.ping, and more
  • Compatible with Jetpack and WooCommerce
  • Optional user enumeration blocking
  • Attack logging for monitoring
  • Zero configuration required – works out of the box
  • Clean, intuitive admin interface

Stop XML-RPC Attacks reviews and ratings

4 reviews on WordPress.org, with the most recent ones as their authors posted them.

All reviews
5.0 out of 5

4 reviews

5★
4
4★
0
3★
0
2★
0
1★
0

  • Great

    Nice plugin thanks

    Anonymous User 16344271

  • Works silently

    It works silently in the background. This is the only security plugin I use, since a W***fence update broke my site about a year back. Gives me a peace of mind.

    Sandip Roy

  • thanks

    all good, thanks

    baf285

  • Simplet et efficace

    Tout est dans le titre. Reste à dire : Merci !

    lesgitesdusomail

Stop XML-RPC Attacks alternatives

Plugins that solve the same problem, ranked by how closely they overlap with Stop XML-RPC Attacks.

All Stop XML-RPC Attacks alternatives

Details

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

The full description, screenshots and every review live on the WordPress.org page.

Rankings Stop XML-RPC Attacks competes in

Tags

  • Brute Force
  • ddos
  • jetpack
  • security
  • xmlrpc

More from Pascal CESCATO

Version
2.0.0
Last updated
Aug 27, 2026
First published
Apr 26, 2019
Requires WordPress
6.0
Tested up to
7.1
Requires PHP
7.4
Pricing
Free on WordPress.org

Stop XML-RPC Attacks FAQ

What does Stop XML-RPC Attacks do?

According to its WordPress.org readme, Stop XML-RPC Attacks offers Three security modes: Full Disable, Guest Disable, or Selective Blocking, Blocks dangerous methods: system.multicall, pingback.ping, and more, Compatible with Jetpack and WooCommerce, Optional user enumeration blocking and Attack logging for monitoring.

How many active installs does Stop XML-RPC Attacks have?

WordPress.org reports 6,000+ active installs for Stop XML-RPC Attacks as of September 7, 2026.

Is Stop XML-RPC Attacks still maintained?

Yes. The last release was on August 27, 2026 and it is tested up to WordPress 7.1.

Is Stop XML-RPC Attacks free?

Stop XML-RPC Attacks is free to install from WordPress.org. Many plugins also sell a paid version or add-ons.