WPIntell

disable-xml-rpc-pingback

Disable XML-RPC Pingback

Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.

60.0K
425.9K
3.9
0
9
10

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

84 / 128 rows with source links

65.6% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

44 rows with no attached evidence

0 rows have source counts but still need direct links.

Download Momentum

180 days
1.6K 2.0K -17.9% 11.9K

Related Opportunities

5 markets

Source Evidence

Open evidence explorer
complaint review · high severity · relevance 1.0
Doesn't work

Doesn't work: users show security, bugs, compatibility pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
For testing purposes i installed 2 plugins to compare : 1.
complaint support · high severity · relevance 0.96
Does this disable outgoing "Update Services" such as ping-o-matic?

Does this disable outgoing "Update Services" such as ping-o-matic?: users show security, compatibility, missing feature pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
Hi, I’m referring to the update services within the WordPress “Settings > Writing” page, as explained in the codex here: https://codex.wordpress.org/Update_Services Does this plugin (thanks for it, btw) disable the functionality of outgoing pings that WordPress sends out when publishing a post?
mixed support · high severity · relevance 0.95
is this work with the new Word Press 4.4 Rest API ?

is this work with the new Word Press 4.4 Rest API ?: users show security, compatibility, missing feature pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
I know the REST API can be disabled, but I still would like to remove the HTTP Header as well.
complaint review · high severity · relevance 0.85
This haven’t updated over than a year

This haven’t updated over than a year: users show bugs, missing feature pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
This haven’t updated over than a year There is better option than this plugin.
praise review · high severity · relevance 0.65
I never installed this myself?

I never installed this myself?: users show security, setup pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
I never installed this myself?
neutral support · high severity · relevance 0.63
Can’t activate Disable XML-RPC Pingback plugin

Can’t activate Disable XML-RPC Pingback plugin: users show bugs, compatibility, setup pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
Can’t activate Disable XML-RPC Pingback plugin Installed the plugin but gets fatal error during activation… Fatal error: Cannot redeclare sar_remove_x_pingback_header() (previously declared in /volume1/web/wordpress/wp-content/mu-plugins/disable-xml-rpc-pingback.php:35) in /volume1/web/wordpress/wp-content/plugins/disable-xml-rpc-pingback/disable-xml-rpc-pin
praise review · high severity · relevance 0.6
Does the job

Does the job: users show security, bugs pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
Does the job Takes care of the pingback XML-RPC vulnerability issues as described.
complaint support · medium severity · relevance 0.86
XML-RPC Attack Haven't Stopped After Installing Plugin

XML-RPC Attack Haven't Stopped After Installing Plugin: users show compatibility, support, setup pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
XML-RPC Attack Haven't Stopped After Installing Plugin Samuel, one of our sites have been under an xml-rpc attack, so I installed this plugin five days ago.
complaint support · medium severity · relevance 0.86
Removing pingbacks tab

Removing pingbacks tab: users show compatibility, missing feature, setup pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
I installed it but nothing happened 🙁 Pingbacks are disabled in the discussion option and disabled for each post but unfortunatelly this option keeps appearing.
complaint support · medium severity · relevance 0.8
Will there be more updates?

Will there be more updates?: users show bugs, support pain that may indicate a product gap.

Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
Investigate Pain card complete API and integration reliability operations Evidence linked to opportunity
This is an excellent and useful plugin that hasn’t been updated in a while.

Competitor Context

9 shown
Cloudflare weak incumbent · intel 100.0 · weakness 63.0
weak incumbent
1 unresolved support thread(s) below-average rating support bugs 2 source links Proof Blocked Evidence linked to opportunity
Buyer: site owners, SEO consultants, and agencies · Wedge: monitor SEO drift, schema/indexing failures, and client-readable search-impact fixes
Protection Against DDoS praise owner · intel 76.3 · weakness 57.9
praise owner
stale update history 6 collected complaint signal(s) missing feature support 2 source links Proof Blocked Evidence linked to opportunity
Buyer: site owners, agencies, and maintenance teams · Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts
Login Dongle praise owner · intel 73.2 · weakness 60.2
praise owner
stale update history 7 collected complaint signal(s) compatibility support 2 source links Investigate Pain Evidence linked to opportunity
Buyer: site owners, agencies, and maintenance teams · Wedge: test ddos lockouts, bot/spam defenses, risky access changes, and incident alerts
Eazy XMLRPC Pingback Disable praise owner · intel 55.5 · weakness 34.2
praise owner
stale update history 1 source link Investigate Pain Evidence linked to opportunity
Buyer: site owners, agencies, and maintenance teams · Wedge: test xmlrpc lockouts, bot/spam defenses, risky access changes, and incident alerts
Stop XML-RPC Attacks praise owner · intel 48.5 · weakness 21.6
praise owner
1 collected complaint signal(s) setup 2 source links Proof Blocked Evidence linked to opportunity
Buyer: site owners, agencies, and maintenance teams · Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts
XML-RPC Settings watchlist · intel 46.7 · weakness 34.9
watchlist
stale update history 1 collected complaint signal(s) bugs 1 source link Proof Blocked Evidence linked to opportunity
Buyer: site owners, agencies, and maintenance teams · Wedge: test security lockouts, bot/spam defenses, risky access changes, and incident alerts
Anti DDOS/BOT reCAPTCHA Protection rising challenger · intel 45.8 · weakness 30.7
rising challenger
stale update history Investigate Pain Evidence linked to opportunity
Buyer: site owners, agencies, and maintenance teams · Wedge: test ddos lockouts, bot/spam defenses, risky access changes, and incident alerts
WP Custom My Password rising challenger · intel 40.4 · weakness 31.1
rising challenger
stale update history 6 source links Proof Blocked Evidence linked to opportunity
Buyer: membership site owners, agencies, and operations teams · Wedge: test user roles, protected content, SSO/login handoffs, and private-data exposure

Repeated Themes

0 shown

No repeated plugin-level themes have been generated yet.

Collected Signals

20 shown from 35 collected
praise This excellent plugin is updated if needed and is still actively maintained (5 stars) review · 2025-10-21T14:45:02+00:00 · medium severity · ddos

This excellent plugin is updated if needed and is still actively maintained: users praise reliable, quality, which suggests what competitors already do well.

Evidence: This excellent plugin is updated if needed and is still actively maintained The plugin author is still actively engaged with this excellently useful plugin.
reliable quality trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
complaint Will there be more updates? support · 2025-10-20T22:11:40+00:00 · medium severity · ddos

Will there be more updates?: users show bugs, support pain that may indicate a product gap.

Evidence: This is an excellent and useful plugin that hasn’t been updated in a while.
bugs support reliable trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
complaint This haven’t updated over than a year (1 star) review · 2021-05-13T16:20:38+00:00 · high severity · ddos

This haven’t updated over than a year: users show bugs, missing feature pain that may indicate a product gap.

Evidence: This haven’t updated over than a year There is better option than this plugin.
bugs missing feature reliable api trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
complaint Broke my site (1 star) review · 2020-10-03T21:43:56+00:00 · medium severity · ddos

Broke my site: users show migration, setup pain that may indicate a product gap.

Evidence: Broke my site This broke my site, I had to revert to a backup on the server after installing it.
migration setup backup trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
neutral not working support · 2019-12-02T09:44:32+00:00 · low severity · ddos

not working: users show compatibility, support pain that may indicate a product gap.

Evidence: not working not working for me still the pingback link of the xmlrpc.php please help i found it thanks This topic was modified 6 years, 5 months ago by Insect Trojan .
compatibility support trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
neutral Does This Plugin Impact Jetpack Functionality support · 2019-04-01T05:44:02+00:00 · medium severity · ddos

Does This Plugin Impact Jetpack Functionality: neutral conversation with limited structured signal.

Evidence: I noticed that my Jetpack Dashboard seems to have disappeared.
dashboard trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
neutral PHP 7 compatible? Disable XML-RPC Pingback support · 2018-11-06T21:38:21+00:00 · low severity · ddos

PHP 7 compatible? Disable XML-RPC Pingback: users show compatibility pain that may indicate a product gap.

Evidence: PHP 7 compatible?
compatibility trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
neutral Can’t activate Disable XML-RPC Pingback plugin support · 2017-12-05T15:51:32+00:00 · high severity · ddos

Can’t activate Disable XML-RPC Pingback plugin: users show bugs, compatibility, setup pain that may indicate a product gap.

Evidence: Can’t activate Disable XML-RPC Pingback plugin Installed the plugin but gets fatal error during activation… Fatal error: Cannot redeclare sar_remove_x_pingback_header() (previously declared in /volume1/web/wordpress/wp-content/mu-plugins/disable-xml-rpc-pingback.php:35) in /volume1/web/wordpress/wp-content/plugins/disable-xml-rpc-pingback/disable-xml-rpc-pin
bugs compatibility setup trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
praise Fantástico plugin, imprescindible (5 stars) review · 2017-01-20T20:50:55+00:00 · medium severity · ddos

Fantástico plugin, imprescindible: praise conversation with limited structured signal.

Evidence: Fantástico plugin, imprescindible Gran trabajo Samuel, en combinación con algunas reglas de htaccess hace un trabajo fantástico. Gran trabajo Samuel, en combinación con algunas reglas de htaccess hace un trabajo fantástico.
trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
praise Great plugins (5 stars) review · 2016-11-19T07:31:54+00:00 · medium severity · ddos

Great plugins: users praise value, quality, which suggests what competitors already do well.

Evidence: Great plugins Thank you for this free and great plugin.
value quality trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
neutral header X-Pingback not removed support · 2016-07-06T08:20:15+00:00 · low severity · ddos

header X-Pingback not removed: users show missing feature pain that may indicate a product gap.

Evidence: The header will be added only for posts where you have the “Allow trackbacks and pingbacks on this page” option enabled.
missing feature trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
mixed How to use support · 2016-06-29T19:49:53+00:00 · medium severity · ddos

How to use: users show bugs, support pain that may indicate a product gap.

Evidence: Please try again later, if the issue continues please contact support with this message: xml_rpc-32700 Try connecting again.
bugs support form trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
praise Awesome and Effective Plugin. (5 stars) review · 2016-06-15T04:24:29+00:00 · medium severity · ddos

Awesome and Effective Plugin.: praise conversation with limited structured signal.

Evidence: Awesome and Effective Plugin. Does what it says and this is what needed for a XMLRPC attacks. Thanks. Does what it says and this is what needed for a XMLRPC attacks. Thanks.
trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
praise I never installed this myself? (5 stars) review · 2016-05-27T08:53:31+00:00 · high severity · ddos

I never installed this myself?: users show security, setup pain that may indicate a product gap.

Evidence: I never installed this myself?
security setup quality form trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
mixed Unable to update, delete reinstall support · 2016-01-28T00:29:23+00:00 · medium severity · ddos

Unable to update, delete reinstall: users show bugs, support, setup pain that may indicate a product gap.

Evidence: Unable to update, delete reinstall Hi, I have been trying to update this plugin and I get this error message The update cannot be installed because we will be unable to copy some files.
bugs support setup trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
mixed is this work with the new Word Press 4.4 Rest API ? support · 2015-12-10T10:15:36+00:00 · high severity · ddos

is this work with the new Word Press 4.4 Rest API ?: users show security, compatibility, missing feature pain that may indicate a product gap.

Evidence: I know the REST API can be disabled, but I still would like to remove the HTTP Header as well.
security compatibility missing feature support trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
neutral Compatible with version WP 4.3.1 support · 2015-12-07T18:10:52+00:00 · low severity · ddos

Compatible with version WP 4.3.1: users show compatibility pain that may indicate a product gap.

Evidence: Compatible with version WP 4.3.1 Will this plugin be updated to be compatible with WordPress version 4.3.1?
compatibility form trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
neutral not working for me. support · 2015-09-04T07:49:35+00:00 · medium severity · ddos

not working for me.: users show compatibility pain that may indicate a product gap.

Evidence: < deleted – I misunderstood the purpose of the plugin – please ignore comment > < deleted – I misunderstood the purpose of the plugin – please ignore comment > That line is inserted by theme authors in the theme source, is not generated automatically by WordPress, so it can’t be removed by the plugin.
compatibility trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
complaint Doesn't work (1 star) review · 2015-08-10T02:53:38+00:00 · high severity · ddos

Doesn't work: users show security, bugs, compatibility pain that may indicate a product gap.

Evidence: For testing purposes i installed 2 plugins to compare : 1.
security bugs compatibility missing feature trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk
complaint Removing pingbacks tab support · 2015-07-15T11:36:14+00:00 · medium severity · ddos

Removing pingbacks tab: users show compatibility, missing feature, setup pain that may indicate a product gap.

Evidence: I installed it but nothing happened 🙁 Pingbacks are disabled in the discussion option and disabled for each post but unfortunatelly this option keeps appearing.
compatibility missing feature setup trust and abuse-prevention operations Investigate Pain card complete Evidence linked to opportunity
Buyer: developers, agencies, and SaaS-integrated WordPress teams · Wedge: monitor xml API failures, payload drift, webhook issues, and external handoff risk