80
Disable XML-RPC
A tiny security shield that occasionally leaves the back door wide open.
HealthyGrowing
80/100
It is a lightweight tool that works for many but fails on certain WordPress versions.
Active installs
~250,000
our estimate · wp.org shows 200k+
Rating
4.3★
30 ratings
Trend · vs a year ago
+663%
Growing fast
56 → 428 installs/day
Downloads over time
real new installs per day · release spikes shown separately from the trend2025-04-302025-08-082025-11-162026-02-232026-06-03
organicrelease spikerelease tailorganic trend · 14d rolling median
Growing fast · +663% in the last year
56/day a year ago→428/day today
Reviews
what people actually sayDisable XML-RPC is a lightweight, well-regarded security plugin that works reliably for most users, but a recurring thread of complaints suggests it fails to fully block XML-RPC on some WordPress versions.
What people like
- +Effectively disables XML-RPC and stops related DoS/spam attacks×6
- +Noticeably reduces server CPU and memory load
- +Simple, lightweight, and free of adware or upsells×2
- +Works across multiple WordPress versions and sites without plugin conflicts×3
Common complaints
- −Reported as non-functional by multiple users — xmlrpc.php remains accessible after installation×5
- −Confirmed broken for at least one user on WordPress 6.4.2 (since 6.4.2)
- −Reported not working on WordPress 5.4.1 (since 5.4.1)
Review trustMostly organic
- 4.33★Verified rating — holds steady vs the raw 4.30★
- 0%One-shot reviewers — most reviewers are active community members
- past spikeReview timing — up to 40% of all reviews landed in a single month
Reviews per month · 5★ vs lower
2024-01-162025-04-102026-06-04
5★ reviews1–4★ reviews
All-time ratings · 30 total
Latest reviews · 30 analyzed
- 2026-05-07★★★★★Very simple very effectiveterps001
- 2024-04-09★★★★★Reduced to perfectionart-at-tec
- 2024-02-10★★★★★Perfect plugin on updated WP versionzaririnatma
- 2024-01-18★★★★★Does not work with WordPress 6.4.2kuzavas
- 2023-12-19★★★★★Great Plugincharmingdoggo
- 2022-09-09★★★★★No adwaretomhung
- 2022-04-27★★★★★Not working (WP 5.8.3)LeTraceurSnork
- 2021-08-18★★★★★Excellent product!ryazhari
- 2020-12-11★★★★★Plugin working fine on WP 5.6Felipe Romero
- 2020-06-05★★★★★Not workingadvantagen
Releases
recent versions from WordPress.org SVNFor developers & the curious
the raw signals behind the grade — none of this is on the friendly summary aboveDownload signals
Baselines are computed on organic days only — release spikes and their tails are excluded, so they're not inflated by the auto-update wave.
301
Baseline · median of last 7 organic days
421
Prior 7-day baseline
273
Floor · 25th percentile over 14 days
419
Mean release-day peak (30d)
336
Latest day · 2026-06-03(organic)
-28.5%
Week-over-week organic trend
Review signals
Concentration and drive-by metrics drive the review-burst and fake-review flags. 30–40% solo reviewers is normal; we only flag the extremes.
40%
Max month share · biggest single 30-day window
2.72
Distribution CV · <0.6 even, >1.5 bursty
83%
5★ share in analyzed sample
0%
Solo reviewers · only this one wp.org activity
—
Volume velocity · last 6mo vs prior 6mo
4.33 → 4.33★
Sample avg · raw → solo-filtered