Description
The plugin removes all methods from the WordPress XML-RPC API. It is an alternative to just using the xmlrpc_enabled hook, because that is only used “To disable XML-RPC methods that require authentication”.
Activating this plugin will disable pingbacks and trackbacks, because these rely on XML-RPC.
Testing the plugin
From the command line you can test if the plugin is working correctly using cURL:
curl -d '<?xml version="1.0"?><methodCall><methodName>system.listMethods</methodName><params><param><value><string/></value></param></params></methodCall>' https://<your domain>/xmlrpc.php
This should only return system methods.
If the request returns methods starting with wp. the plugin is not active.
Installation
- Download the plugin and unzip it. Copy the files to the
/wp-content/plugins/wee-remove-xmlrpc-methodsdirectory - Activate the plugin through the ‘Plugins’ menu in WordPress
Contributors & Developers
“Remove XML-RPC Methods” is open source software. The following people have contributed to this plugin.
Contributors
Translate “Remove XML-RPC Methods” into your language.
Interested in development?
Browse the code, check out the SVN repository, or subscribe to the development log by RSS.
Changelog
1.4.0
- Tested with PHP 8.0
- Tested WordPress up to version 5.6.
1.3.1
- Correct description
1.3.0
- Replace PHP
headerfunction withhttp_response_code. - Update readme.txt.
- Raise minimal supported WordPress version to 4.6.
- Tested WordPress up to version 5.5.
1.2.0
- Replace pings_open action function with built-in function.
- Increase pings_open action priority.
- Raise minimal supported WordPress version to 4.4.
- Tested WordPress up to version 5.4.
1.1.0
- Deactivate pingbacks on install.
- Remove RSD link reference.