How to Disable XMLRPC.PHP in WordPress
Jackson Dunagan
![Jackson Dunagan]()
Jackson Dunagan
Digital Influencer, Speaker, & Founder of Bright Vessel | Bright Plugins | Bright Hosting | Co-Founder of Print Mavericks | Flawless WordPress management & plugins for eCommerce brands
A security audit we perform on every site we manage is the disabling of xmlrpc.php in WordPress.
What Is xmlrpc.php?
WordPress includes a feature called XML-RPC that enables data to be transmitted by HTTP and XML to encode the data. The issue with security is that it allows you to access a website from any custom admin software or mobile applications vs. using the browser.
How to disable XML-RPC with a Plugin
Fortunately for the non-techies, there is a free plugin that can do this for you.
Installation
- Upload to the /wp-content/plugins/directory in the plugin panel.
- Activate the plugin
- Bam!, it is now disabled.
Click here to read the rest of the article.