Disable XML-RPC-API
Healthy: released 9 months ago, no open vulnerabilities. One warning: not tested with recent WordPress versions.
Based on 3 of 5 areas
| Ownership | 100 |
|---|---|
| Maintenance | 50 |
| Security | 100 |
| Support | No data |
| Reputation | No data |
Active signals
Open issues right now, with links to the source.
- WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence
Quick answers
- Is Disable XML-RPC-API still maintained?
- Yes. Last release 4 Feb 2026, 1 release in the last 24 months. 4 Feb 2026 · wordpress.org
- Who owns Disable XML-RPC-API, and has it changed hands?
- No change recorded. Main committer aminnz since Oct 2020. 4 Nov 2026 · SVN log
- Was Disable XML-RPC-API removed from wordpress.org?
- No. Listed on wordpress.org as of 4 Nov 2026. 4 Nov 2026 · wordpress.org
- Is Disable XML-RPC-API safe?
- No known vulnerabilities on record. 4 Nov 2026 · Wordfence Intelligence
- Is the latest Disable XML-RPC-API update safe to install?
- No ownership change before 2.1.7. No one-star spike after it. 13 Dec 2024 · Release history
Ownership timeline
Who commits to the plugin's code on wordpress.org, over time.
| plugin-master | 30 Sep 2020 to 30 Sep 2020, 1 commits |
|---|---|
| aminnz | 1 Oct 2020 to 4 Feb 2026, 78 commits |
2 committers recorded. No ownership changes recorded since 2020.
Maintenance
- Last release
- 9 months ago
- Releases, 24 months
- 1
- Tested up to
- 6.9 vs 7.1
- Requires PHP
- not stated supported 8.2+
| Q1 2024 | 0 |
|---|---|
| Q2 2024 | 0 |
| Q3 2024 | 1 |
| Q4 2024 | 1 |
| Q1 2025 | 0 |
| Q2 2025 | 0 |
| Q3 2025 | 0 |
| Q4 2025 | 0 |
| Q1 2026 | 0 |
| Q2 2026 | 0 |
| Q3 2026 | 0 |
| Q4 2026 | 0 |
Last release 4 Feb 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.
Support
- Resolved, last 2 months
- 0%
- Threads, last 2 months
- 1
Trend appears after 8 weekly snapshots.
Security record
No published vulnerabilities on record for this plugin.
Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.
Reputation
Last 90 days: no reviews. Lifetime: 4.2.
| Last 90 days | No reviews |
|---|---|
| Lifetime | 4.2 |
Average rating rose from 3.0 to 5.0 between Q3 2025 and Q2 2026.
| 5 star | 33 |
|---|---|
| 4 star | 0 |
| 3 star | 1 |
| 2 star | 2 |
| 1 star | 7 |
- Harmful · 1 star · 19 Aug 2025
- Error · 1 star · 14 Aug 2023
- DO NOT INSTALL THIS! **PHP BACKDOOR** · 1 star · 29 May 2023
Momentum
- Active installs
- 100,000+
- Downloads, last full week
- 1,917
| 4 May 2026 | 406 |
|---|---|
| 11 May 2026 | 1,276 |
| 18 May 2026 | 1,269 |
| 25 May 2026 | 1,361 |
| 1 Jun 2026 | 1,132 |
| 8 Jun 2026 | 1,121 |
| 15 Jun 2026 | 1,148 |
| 22 Jun 2026 | 1,083 |
| 29 Jun 2026 | 1,083 |
| 6 Jul 2026 | 1,134 |
| 13 Jul 2026 | 1,070 |
| 20 Jul 2026 | 1,794 |
| 27 Jul 2026 | 1,350 |
| 3 Aug 2026 | 1,382 |
| 10 Aug 2026 | 1,283 |
| 17 Aug 2026 | 1,211 |
| 24 Aug 2026 | 1,247 |
| 31 Aug 2026 | 1,334 |
| 7 Sep 2026 | 1,203 |
| 14 Sep 2026 | 1,219 |
| 21 Sep 2026 | 1,080 |
| 28 Sep 2026 | 1,247 |
| 5 Oct 2026 | 1,727 |
| 12 Oct 2026 | 1,237 |
| 19 Oct 2026 | 2,192 |
| 26 Oct 2026 | 1,917 |
Weekly downloads over the last 4 weeks are 37% above the 26-week average.
Healthier alternatives
Same job, rated Healthy, higher Canary Score. Never sponsored.
Facts
- Version
- 2.1.7
- Author
- Amin Nazemi
- Added
- 1 Oct 2020
- Last updated
- 4 Feb 2026
- Active installs
- 100,000+
- Requires WordPress
- 5.0
- Tested up to
- 6.9.11
- Requires PHP
- not stated
- Category
- Security & Privacy > Security Scanning & Malware Protection
- Tags
- xmlrpc, pingback, disable xmlrpc, disable xml-rpc, stop brute force attacks
Other plugins by this author: Preserve Taxonomy Hierarchy, Easy Gravity Tooltip, User Dashboard, Disable Plugins on Pages Posts (Plugin
Questions about Disable XML-RPC-API
Is Disable XML-RPC-API still maintained?
Yes. Last release 4 Feb 2026, 1 release in the last 24 months.
Who owns Disable XML-RPC-API, and has it changed hands?
No change recorded. Main committer aminnz since Oct 2020.
Was Disable XML-RPC-API removed from wordpress.org?
No. Listed on wordpress.org as of 4 Nov 2026.
Is Disable XML-RPC-API safe?
No known vulnerabilities on record.
Is the latest Disable XML-RPC-API update safe to install?
No ownership change before 2.1.7. No one-star spike after it.