Title: Remove XML-RPC Methods Author: Walter Ebert Published: February 10, 2020 Last modified: March 26, 2026 --- Search plugins ![](https://ps.w.org/wee-remove-xmlrpc-methods/assets/banner-772x250.jpg?rev=2241564) ![](https://ps.w.org/wee-remove-xmlrpc-methods/assets/icon-256x256.jpg?rev=2241564) # Remove XML-RPC Methods By [Walter Ebert](https://profiles.wordpress.org/walterebert/) [Download](https://downloads.wordpress.org/plugin/wee-remove-xmlrpc-methods.1.4.2.zip) * [Details](https://wordpress.org/plugins/wee-remove-xmlrpc-methods/#description) * [Reviews](https://wordpress.org/plugins/wee-remove-xmlrpc-methods/#reviews) * [Installation](https://wordpress.org/plugins/wee-remove-xmlrpc-methods/#installation) * [Development](https://wordpress.org/plugins/wee-remove-xmlrpc-methods/#developers) [Support](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/) ## Description Removes all WordPress methods from the XML-RPC API to increase security. It does more than just using the `xmlrpc_enabled` hook, because that is only used “To disable XML-RPC methods that require authentication”. Activating this plugin will also disable pingbacks, trackbacks, and Really Simple Discovery (RSD), because these rely on XML-RPC. It works with any webserver, because it does not use the .htaccess file. #### Testing the plugin From the command line you can test if the plugin is working correctly using [curl](https://curl.haxx.se/). Replace the `example.com` link to match your website: ``` curl -d 'system.listMethods' https://example.com/xmlrpc.php ``` This should only return the following methods: – `system.multicall` – `system.listMethods`–` system.getCapabilities` ## Installation 1. Download the plugin and unzip it. Copy the files to the `/wp-content/plugins/wee- remove-xmlrpc-methods` directory 2. Activate the plugin through the ‘Plugins’ menu in WordPress ## Reviews ![](https://secure.gravatar.com/avatar/407fdfe451c92896d8ecabc44d2635ab54fc16296ce60f0ede3292568b3f1a90? s=60&d=retro&r=g) ### 󠀁[works](https://wordpress.org/support/topic/works-2195/)󠁿 [muhaos](https://profiles.wordpress.org/muhaos/) October 27, 2024 works ![](https://secure.gravatar.com/avatar/8e57d327a741bb67147a3d6385f50f204a016b3cef6fa568b4046554ddc7deb8? s=60&d=retro&r=g) ### 󠀁[Good](https://wordpress.org/support/topic/good-5325/)󠁿 [brondsem](https://profiles.wordpress.org/brondsem/) May 1, 2020 Seems to work as expected. [ Read all 2 reviews ](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/reviews/) ## Contributors & Developers “Remove XML-RPC Methods” is open source software. The following people have contributed to this plugin. Contributors * [ Walter Ebert ](https://profiles.wordpress.org/walterebert/) [Translate “Remove XML-RPC Methods” into your language.](https://translate.wordpress.org/projects/wp-plugins/wee-remove-xmlrpc-methods) ### Interested in development? [Browse the code](https://plugins.trac.wordpress.org/browser/wee-remove-xmlrpc-methods/), check out the [SVN repository](https://plugins.svn.wordpress.org/wee-remove-xmlrpc-methods/), or subscribe to the [development log](https://plugins.trac.wordpress.org/log/wee-remove-xmlrpc-methods/) by [RSS](https://plugins.trac.wordpress.org/log/wee-remove-xmlrpc-methods/?limit=100&mode=stop_on_copy&format=rss). ## Changelog #### 1.4.2 * Updated description * Tested WordPress up to version 7.0. #### 1.4.1 * Updated description and tags #### 1.4.0 * Tested with PHP 8.0 * Tested WordPress up to version 5.6. #### 1.3.1 * Correct description #### 1.3.0 * Replace PHP `header` function with `http_response_code`. * Update readme.txt. * Raise minimal supported WordPress version to 4.6. * Tested WordPress up to version 5.5. #### 1.2.0 * Replace pings_open action function with built-in function. * Increase pings_open action priority. * Raise minimal supported WordPress version to 4.4. * Tested WordPress up to version 5.4. #### 1.1.0 * Deactivate pingbacks on install. * Remove RSD link reference. ## Meta * Version **1.4.2** * Last updated **1 week ago** * Active installations **1,000+** * WordPress version ** 4.6 or higher ** * Tested up to **7.0** * PHP version ** 5.4.0 or higher ** * Tags * [security](https://wordpress.org/plugins/tags/security/)[xml-rpc](https://wordpress.org/plugins/tags/xml-rpc/) [xmlrpc](https://wordpress.org/plugins/tags/xmlrpc/) * [Advanced View](https://wordpress.org/plugins/wee-remove-xmlrpc-methods/advanced/) ## Ratings 5 out of 5 stars. * [ 2 5-star reviews ](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/reviews/?filter=5) * [ 0 4-star reviews ](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/reviews/?filter=4) * [ 0 3-star reviews ](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/reviews/?filter=3) * [ 0 2-star reviews ](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/reviews/?filter=2) * [ 0 1-star reviews ](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/reviews/?filter=1) [Add my review](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/reviews/#new-post) [See all reviews](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/reviews/) ## Contributors * [ Walter Ebert ](https://profiles.wordpress.org/walterebert/) ## Support Got something to say? Need help? [View support forum](https://wordpress.org/support/plugin/wee-remove-xmlrpc-methods/)