Title: Stop XML-RPC Attacks
Author: Pascal CESCATO
Published: <strong>26 Aprel 2019</strong>
Last modified: 01 Yanvar 2026

---

Qoşmaları axtar

![](https://ps.w.org/stop-xml-rpc-attacks/assets/banner-772x250.png?rev=2075425)

![](https://ps.w.org/stop-xml-rpc-attacks/assets/icon-256x256.png?rev=2075425)

# Stop XML-RPC Attacks

 By [Pascal CESCATO](https://profiles.wordpress.org/pcescato/)

[Download](https://downloads.wordpress.org/plugin/stop-xml-rpc-attacks.2.0.0.zip)

 * [Details](https://az.wordpress.org/plugins/stop-xml-rpc-attacks/#description)
 * [Reviews](https://az.wordpress.org/plugins/stop-xml-rpc-attacks/#reviews)
 *  [Installation](https://az.wordpress.org/plugins/stop-xml-rpc-attacks/#installation)
 * [Development](https://az.wordpress.org/plugins/stop-xml-rpc-attacks/#developers)

 [Dəstək](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/)

## Description

Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks,
DDoS attempts, and reconnaissance probes while maintaining compatibility with essential
services like Jetpack and WooCommerce.

**Features:**

 * Three security modes: Full Disable, Guest Disable, or Selective Blocking
 * Blocks dangerous methods: system.multicall, pingback.ping, and more
 * Compatible with Jetpack and WooCommerce
 * Optional user enumeration blocking
 * Attack logging for monitoring
 * Zero configuration required – works out of the box
 * Clean, intuitive admin interface

## Installation

 1. Upload the plugin files to `/wp-content/plugins/stop-xmlrpc-attacks/`
 2. Activate the plugin through the ‘Plugins’ menu in WordPress
 3. Go to Settings > XML-RPC Security to configure (optional)

## FAQ

### Will this break Jetpack?

No! The default “Selective Blocking” mode is fully compatible with Jetpack and WooCommerce.

### What’s the difference between the security modes?

 * **Full Disable**: Maximum security, disables XML-RPC completely
 * **Guest Disable**: Balanced approach, only allows XML-RPC for logged-in users
 * **Selective Blocking**: Best compatibility, only blocks dangerous methods

### How do I enable logging?

Go to Settings > XML-RPC Security and check “Enable Attack Logging”. Logs will be
written to your debug.log file when WP_DEBUG is enabled.

## Reviews

![](https://secure.gravatar.com/avatar/b959b03e0bfa53fc258b2f1e22cfa5bc921f1f28d8f4b5c75afb22617b4d166d?
s=60&d=retro&r=g)

### 󠀁[Great](https://wordpress.org/support/topic/great-14892/)󠁿

 [Anonymous User 16344271](https://profiles.wordpress.org/anonymized-16344271/) 
24 Sentyabr 2022 1 reply

Nice plugin thanks

![](https://secure.gravatar.com/avatar/9ed8d960761ad688c132f448fd549cda282c8868b0f9e9587ce5bed623d9694d?
s=60&d=retro&r=g)

### 󠀁[Works silently](https://wordpress.org/support/topic/works-silently-2/)󠁿

 [Sandip Roy](https://profiles.wordpress.org/sandip-roy/) 21 Fevral 2022

It works silently in the background. This is the only security plugin I use, since
a W***fence update broke my site about a year back. Gives me a peace of mind.

![](https://secure.gravatar.com/avatar/c3e0ae8928317e1270c5e6559c165a762495a990ceac61b8b86557b0934d5b61?
s=60&d=retro&r=g)

### 󠀁[thanks](https://wordpress.org/support/topic/thanks-2200/)󠁿

 [baf285](https://profiles.wordpress.org/baf285/) 07 Yanvar 2022 1 reply

all good, thanks

![](https://secure.gravatar.com/avatar/aa109f51d0a70582dee4ee0220fbdfc40a6f5a8e65d762a55a624cb6b0b67a27?
s=60&d=retro&r=g)

### 󠀁[Simplet et efficace](https://wordpress.org/support/topic/simplet-et-efficace/)󠁿

 [lesgitesdusomail](https://profiles.wordpress.org/lesgitesdusomail/) 17 Oktyabr
2019 1 reply

Tout est dans le titre. Reste à dire : Merci !

 [ Read all 4 reviews ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/)

## Contributors & Developers

“Stop XML-RPC Attacks” is open source software. The following people have contributed
to this plugin.

Contributors

 *   [ Pascal CESCATO ](https://profiles.wordpress.org/pcescato/)

“Stop XML-RPC Attacks” has been translated into 2 locales. Thank you to [the translators](https://translate.wordpress.org/projects/wp-plugins/stop-xml-rpc-attacks/contributors)
for their contributions.

[Translate “Stop XML-RPC Attacks” into your language.](https://translate.wordpress.org/projects/wp-plugins/stop-xml-rpc-attacks)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/stop-xml-rpc-attacks/),
check out the [SVN repository](https://plugins.svn.wordpress.org/stop-xml-rpc-attacks/),
or subscribe to the [development log](https://plugins.trac.wordpress.org/log/stop-xml-rpc-attacks/)
by [RSS](https://plugins.trac.wordpress.org/log/stop-xml-rpc-attacks/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 2.0.0

 * Added admin interface with visual settings
 * Three security modes to choose from
 * Optional attack logging
 * Improved code quality and security
 * Full internationalization support

#### 1.0.1

 * Initial release
 * Basic blocking of dangerous methods

## Meta

 *  Version **2.0.0**
 *  Last updated **4 ay öncə**
 *  Active installations **6. 000+**
 *  WordPress version ** 6.0 or higher **
 *  Tested up to **6.9.4**
 *  PHP version ** 7.4 or higher **
 *  Languages
 * [English (US)](https://wordpress.org/plugins/stop-xml-rpc-attacks/), [French (France)](https://fr.wordpress.org/plugins/stop-xml-rpc-attacks/),
   and [German](https://de.wordpress.org/plugins/stop-xml-rpc-attacks/).
 *  [Translate into your language](https://translate.wordpress.org/projects/wp-plugins/stop-xml-rpc-attacks)
 * Tags
 * [Brute Force](https://az.wordpress.org/plugins/tags/brute-force/)[ddos](https://az.wordpress.org/plugins/tags/ddos/)
   [jetpack](https://az.wordpress.org/plugins/tags/jetpack/)[security](https://az.wordpress.org/plugins/tags/security/)
   [xmlrpc](https://az.wordpress.org/plugins/tags/xmlrpc/)
 *  [Advanced View](https://az.wordpress.org/plugins/stop-xml-rpc-attacks/advanced/)

## Reytinqlər

 5 out of 5 stars.

 *  [  4 5-star reviews     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=5)
 *  [  0 4-star reviews     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=4)
 *  [  0 3-star reviews     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=3)
 *  [  0 2-star reviews     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=2)
 *  [  0 1-star reviews     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/)

## Contributors

 *   [ Pascal CESCATO ](https://profiles.wordpress.org/pcescato/)

## Dəstək

Şərhiniz varmı? Yardım lazımdırmı?

 [Dəstək forumuna bax](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/)