Skip to content
PluginCanary

Disable XML-RPC

by Phil Erb · 200,000+ active installs · Checked 4 Nov 2026
Healthy

Healthy: maintained, last release 27 May 2026, no unpatched vulnerabilities.

90/ 100 Canary Score
Sub-scores for Disable XML-RPC
Ownership100
Maintenance85
Security100
SupportNo data
Reputation70

How the score works

Quick answers

Is Disable XML-RPC still maintained?
Yes. Last release 27 May 2026, 0 releases in the last 24 months. 27 May 2026 · wordpress.org
Who owns Disable XML-RPC, and has it changed hands?
No change recorded. Main committer philerb since Sep 2012. 4 Nov 2026 · SVN log
Was Disable XML-RPC removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
Is Disable XML-RPC safe?
No known vulnerabilities on record. 4 Nov 2026 · Wordfence Intelligence
Is the latest Disable XML-RPC update safe to install?
No ownership change before 1.0.1. No one-star spike after it. 5 Feb 2015 · Release history

Active signals

Facts we detected, with links to the source.

No open risk signals. Signals appear here when we detect an ownership change, closure, vulnerability or decline.

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
philerb28 Sep 2012 to 27 May 2026, 23 commits

1 committer recorded. No ownership change since 2012.

Maintenance

Last release
5 months ago
Releases, 24 months
0
Tested up to
7.0 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Disable XML-RPC
Q1 20240
Q2 20240
Q3 20240
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20250
Q1 20260
Q2 20260
Q3 20260
Q4 20260

Last release 27 May 2026. Tested up to 7.0, 1 major version behind WordPress 7.1.

Reputation

Last 90 days: 3.0 (2 reviews). Lifetime: 4.1.

Average rating per quarter for Disable XML-RPC
Q4 20235.0
Q1 20243.0
Q2 20245.0
Q2 20263.5
Q3 20262.3

Average rating fell from 5.0 to 2.3 between Q4 2023 and Q3 2026.

Rating distribution
5 star26
4 star0
3 star0
2 star1
1 star7
Latest low reviews

Security record

No published vulnerabilities on record for this plugin.

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

Support history appears after our first snapshots of the forum counts.

Momentum

200,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Disable XML-RPC
4 May 20261,802
11 May 20262,891
18 May 20262,814
25 May 20262,361
1 Jun 20261,910
8 Jun 20261,964
15 Jun 20261,635
22 Jun 20261,392
29 Jun 20261,205
6 Jul 20261,109
13 Jul 20261,249
20 Jul 20262,280
27 Jul 20261,674
3 Aug 20262,455
10 Aug 20262,144
17 Aug 20261,819
24 Aug 20261,471
31 Aug 20261,304
7 Sep 20261,372
14 Sep 20261,245
21 Sep 20261,431
28 Sep 20261,236
5 Oct 20261,698
12 Oct 20261,259
19 Oct 20262,509
26 Oct 20261,555
2 Nov 2026430

Weekly downloads over the last 4 weeks are 16% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Disable WP REST APIScore 100 · 30,000+AntiVirusScore 100 · 30,000+Protect UploadsScore 100 · 30,000+CloudSecure WP SecurityScore 98 · 100,000+WP fail2banScore 98 · 60,000+

Facts

Version1.0.1
AuthorPhil Erb
Added28 Sep 2012
Last updated27 May 2026
Active installs200,000+
Requires WordPress3.5
Tested up to7.0.8
Requires PHPnot stated
CategorySecurity & Privacy > Security Scanning & Malware Protection
Tagsxmlrpc

Questions

Is Disable XML-RPC still maintained?

Yes. Last release 27 May 2026, 0 releases in the last 24 months.

Who owns Disable XML-RPC, and has it changed hands?

No change recorded. Main committer philerb since Sep 2012.

Was Disable XML-RPC removed from wordpress.org?

No. Listed on wordpress.org as of 4 Nov 2026.

Is Disable XML-RPC safe?

No known vulnerabilities on record.

Is the latest Disable XML-RPC update safe to install?

No ownership change before 1.0.1. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 4 Nov 2026.Report a data issue