WP Manifestindependent plugin directory
manifest / security / xmlrpc-disable-extreme

Disable XML-RPC Extreme

Disable the WordPress XML-RPC and cloak the xmlrpc.php

by itthinx · github.com/itthinx/xmlrpc-disable-extreme · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/itthinx/xmlrpc-disable-extreme/archive/refs/heads/master.zip
Readme github.com/itthinx/xmlrpc-disable-extreme ↗

A WordPress plugin that disables the WordPress XML-RPC and cloaks the xmlrpc.php file.

Description

Disabled the WordPress XML-RPC and cloaks the original xmlrpc.php file by renaming it.

This plugin can also be deployed as a MUST-USE plugin. For that, place the xmlrpc-disable-extreme.php in mu-plugins.

The plugin will try to rename the file xmlrpc.php using an arbitrary suffix so that attempts to access it will cause 404 request errors!

Note that the plugin will NOT reinstate the original xmlrpc.php. This must be done manually by renaming the cloaked file back.

The plugin creates an option disable_xmlrpc_extreme_cloaked where the names of the cloaked files are gathered.

If the original xmlrpc.php is added again during an update, it will be rename as long as the plugin is enabled.