All plugins

WordPress plugin

Turn off XML-RPC Authentication

Disable XML-RPC Authentication for WordPress

Reduce abuse, scans, and unwanted access

Free plugin Unlock EUR 1 All plugins
  • One plugin, one fix
  • Less spam and abuse
  • EUR 1 once

In plain language

Which problem does this solve?

Reduce abuse, scans, and unwanted access

Free base plugin

What this plugin does

Blocks username and password authentication attempts made through WordPress XML-RPC.

More functionality

What the upgrade adds

Free plugin. Small fee for more functionality. The paid upgrade includes the working fix and a wp-admin pause control. One-time unlock, no subscription.

Category

When this fix makes sense

Use this plugin when you want to solve exactly this WordPress annoyance without installing a large settings suite or broad optimisation plugin.

Less spam and abuse

More small plugins in this category

Less spam and abuse Disable XML-RPC Only Disables WordPress XML-RPC without adding broader security or cleanup changes. Less spam and abuse Disable REST API User Endpoints Hides and blocks `/wp/v2/users` REST API endpoints for users who cannot list users. Less spam and abuse Disable Application Passwords Turns off WordPress application passwords. Less spam and abuse Remove WordPress Generator Removes the WordPress generator meta tag and generator output.