Control remote XML-RPC publishing

Starting in version 3.5, publishing via XML-RPC to WordPress is enabled by default publishing to better serve people that use smartphones and want to be able to publish to their sites.  As part of the change not only were the feature set to be active by default, but also the option to disable it was removed.

Since that point in time attackers have started to try and gain access to WordPress sites via the XML-RPC protocol. This plugin will put back your site into a pre 3.5 state – XML-RPC publishing is disabled by default and you can enable and disable it from the writing settings page of the admin.


The settings are under “Settings” >> “Writing” menu, under the “Remote publishing with XML-RPC” section.

General Compatibility

wordpress version 3.5 and above

Multisite/Network compatibility

Can be network activated or dropped into the mu-plugins directory, but you should consider using the version of this plugin dedicated to work in a network setting.


Supported in the code but no .po files are provided right now. i.e. you will have to do it yourself. OTOH there isn’t anything that is really worth translating.

Current version


Support policy

Our plugins are designed to “just work” and they include the documentation required to get the max out of them. You are welcome to ask any “pre sale” question on this page, and we will gladly solve any bugs reported by you, on the bug report page, but we do no guaranty answers to general support question (for example how to control the size of the search box).

Leave a Reply

Your email address will not be published. Required fields are marked *

Comment policy

We are not going to share your e-mail with anyone else, but we might send you answers to your questions directly to your email.