{"id":103262,"date":"2019-04-26T14:09:00","date_gmt":"2019-04-26T14:09:00","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/stop-xml-rpc-attacks\/"},"modified":"2026-01-01T13:41:00","modified_gmt":"2026-01-01T13:41:00","slug":"stop-xml-rpc-attacks","status":"publish","type":"plugin","link":"https:\/\/he.wordpress.org\/plugins\/stop-xml-rpc-attacks\/","author":8240261,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"2.0.0","stable_tag":"2.0.0","tested":"6.9.4","requires":"6.0","requires_php":"7.4","requires_plugins":null,"header_name":"Stop XML-RPC Attacks","header_author":"Pascal CESCATO","header_description":"Secure your site's XML-RPC by removing some methods, while you can still use XML-RPC.","assets_banners_color":"c58585","last_updated":"2026-01-01 13:41:00","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"","header_author_uri":"https:\/\/zone-test.ovh","rating":5,"author_block_rating":0,"active_installs":6000,"downloads":27124,"num_ratings":4,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.1":{"tag":"1.0.1","author":"pcescato","date":"2025-08-30 00:00:56"},"2.0.0":{"tag":"2.0.0","author":"pcescato","date":"2026-01-01 13:41:00"}},"upgrade_notice":{"2.0.0":"<p>Major update with admin interface.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":4},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":2075425,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":2075425,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":2075425,"resolution":"1544x500","location":"assets","locale":""},"banner-772x250.png":{"filename":"banner-772x250.png","revision":2075425,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.1","2.0.0"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[2439,13866,1075,600,14731],"plugin_category":[44],"plugin_contributors":[170706],"plugin_business_model":[],"class_list":["post-103262","plugin","type-plugin","status-publish","hentry","plugin_tags-brute-force","plugin_tags-ddos","plugin_tags-jetpack","plugin_tags-security","plugin_tags-xmlrpc","plugin_category-discussion-and-community","plugin_contributors-pcescato","plugin_committers-pcescato"],"banners":{"banner":"https:\/\/ps.w.org\/stop-xml-rpc-attacks\/assets\/banner-772x250.png?rev=2075425","banner_2x":"https:\/\/ps.w.org\/stop-xml-rpc-attacks\/assets\/banner-1544x500.png?rev=2075425","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/stop-xml-rpc-attacks\/assets\/icon-128x128.png?rev=2075425","icon_2x":"https:\/\/ps.w.org\/stop-xml-rpc-attacks\/assets\/icon-256x256.png?rev=2075425","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes while maintaining compatibility with essential services like Jetpack and WooCommerce.<\/p>\n\n<p><strong>Features:<\/strong><\/p>\n\n<ul>\n<li>Three security modes: Full Disable, Guest Disable, or Selective Blocking<\/li>\n<li>Blocks dangerous methods: system.multicall, pingback.ping, and more<\/li>\n<li>Compatible with Jetpack and WooCommerce<\/li>\n<li>Optional user enumeration blocking<\/li>\n<li>Attack logging for monitoring<\/li>\n<li>Zero configuration required - works out of the box<\/li>\n<li>Clean, intuitive admin interface<\/li>\n<\/ul>\n\n<!--section=installation-->\n<ol>\n<li>Upload the plugin files to <code>\/wp-content\/plugins\/stop-xmlrpc-attacks\/<\/code><\/li>\n<li>Activate the plugin through the 'Plugins' menu in WordPress<\/li>\n<li>Go to Settings &gt; XML-RPC Security to configure (optional)<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id='will%20this%20break%20jetpack%3F'><h3>Will this break Jetpack?<\/h3><\/dt>\n<dd><p>No! The default \"Selective Blocking\" mode is fully compatible with Jetpack and WooCommerce.<\/p><\/dd>\n<dt id='what%27s%20the%20difference%20between%20the%20security%20modes%3F'><h3>What's the difference between the security modes?<\/h3><\/dt>\n<dd><ul>\n<li><strong>Full Disable<\/strong>: Maximum security, disables XML-RPC completely<\/li>\n<li><strong>Guest Disable<\/strong>: Balanced approach, only allows XML-RPC for logged-in users<\/li>\n<li><strong>Selective Blocking<\/strong>: Best compatibility, only blocks dangerous methods<\/li>\n<\/ul><\/dd>\n<dt id='how%20do%20i%20enable%20logging%3F'><h3>How do I enable logging?<\/h3><\/dt>\n<dd><p>Go to Settings &gt; XML-RPC Security and check \"Enable Attack Logging\". Logs will be written to your debug.log file when WP_DEBUG is enabled.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>2.0.0<\/h4>\n\n<ul>\n<li>Added admin interface with visual settings<\/li>\n<li>Three security modes to choose from<\/li>\n<li>Optional attack logging<\/li>\n<li>Improved code quality and security<\/li>\n<li>Full internationalization support<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Initial release<\/li>\n<li>Basic blocking of dangerous methods<\/li>\n<\/ul>","raw_excerpt":"Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/103262","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=103262"}],"author":[{"embeddable":true,"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/pcescato"}],"wp:attachment":[{"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=103262"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=103262"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=103262"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=103262"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=103262"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/he.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=103262"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}