manifest / security / xmlrpc-disable-extreme

Disable XML-RPC Extreme

Disable the WordPress XML-RPC and cloak the xmlrpc.php

★ 0stars

1.0.0latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/itthinx/xmlrpc-disable-extreme/archive/refs/heads/master.zip

No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

A WordPress plugin that disables the WordPress XML-RPC and cloaks the xmlrpc.php file.

Disabled the WordPress XML-RPC and cloaks the original xmlrpc.php file by renaming it.

This plugin can also be deployed as a MUST-USE plugin. For that, place the xmlrpc-disable-extreme.php in mu-plugins.

The plugin will try to rename the file xmlrpc.php using an arbitrary suffix so that attempts to access it will cause 404 request errors!

Note that the plugin will NOT reinstate the original xmlrpc.php. This must be done manually by renaming the cloaked file back.

The plugin creates an option disable_xmlrpc_extreme_cloaked where the names of the cloaked files are gathered.

If the original xmlrpc.php is added again during an update, it will be rename as long as the plugin is enabled.

1 release.

Tag

Published

1.0.0 latest

Aug 18, 2025 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.