Stop XML-RPC Attacks

Àpèjúwe

Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes while maintaining compatibility with essential services like Jetpack and WooCommerce.

Features:

  • Three security modes: Full Disable, Guest Disable, or Selective Blocking
  • Blocks dangerous methods: system.multicall, pingback.ping, and more
  • Compatible with Jetpack and WooCommerce
  • Optional user enumeration blocking
  • Attack logging for monitoring
  • Zero configuration required – works out of the box
  • Clean, intuitive admin interface

Ìgbéwọlẹ̀

  1. Upload the plugin files to /wp-content/plugins/stop-xmlrpc-attacks/
  2. Activate the plugin through the ‘Plugins’ menu in WordPress
  3. Go to Settings > XML-RPC Security to configure (optional)

FAQ

Will this break Jetpack?

No! The default “Selective Blocking” mode is fully compatible with Jetpack and WooCommerce.

What’s the difference between the security modes?

  • Full Disable: Maximum security, disables XML-RPC completely
  • Guest Disable: Balanced approach, only allows XML-RPC for logged-in users
  • Selective Blocking: Best compatibility, only blocks dangerous methods

How do I enable logging?

Go to Settings > XML-RPC Security and check “Enable Attack Logging”. Logs will be written to your debug.log file when WP_DEBUG is enabled.

Àwọn àgbéyẹ̀wò

Èrèlé 21, 2022
It works silently in the background. This is the only security plugin I use, since a W***fence update broke my site about a year back. Gives me a peace of mind.
Ṣẹrẹ 7, 2022 1 ìdáhùn
all good, thanks
Ka gbogbo àwọn àgbéyẹ̀wò 4

Àwọn Olùkópa & Olùgbéejáde

“Stop XML-RPC Attacks” jẹ́ ètò ìṣàmúlò orísun ṣíṣí sílẹ̀. Àwọn ènìyàn wọ̀nyí ti ṣe ìkópa sí plugin yìí.

Àwọn Olùkópa

A ti túmọ̀ “Stop XML-RPC Attacks” sí àwọn èdè agbègbè 2. Ọpẹ́lọpẹ́ fún àwọn atúmọ̀ èdè fún àwọn ìkópa wọn.

Túmọ̀ “Stop XML-RPC Attacks” sí èdè rẹ.

Ṣe o nífẹ̀ẹ́ sí ìdàgbàsókè?

Ṣàwárí koodu, ṣàyẹ̀wò ibi ìpamọ́ SVN, tàbí ṣe àgbékalẹ̀ sí àkọsílẹ̀ ìdàgbàsókè nípasẹ̀ RSS.

Àkọsílẹ̀ àwọn àyípadà

2.0.0

  • Added admin interface with visual settings
  • Three security modes to choose from
  • Optional attack logging
  • Improved code quality and security
  • Full internationalization support

1.0.1

  • Initial release
  • Basic blocking of dangerous methods