Disable XML-RPC Pingback Security & Risk Analysis

wordpress.org/plugins/disable-xml-rpc-pingback

Stops abuse of your site's XML-RPC by simply removing some methods used by attackers. While you can use the rest of XML-RPC methods.

60K active installs v1.2.2 PHP 5.6+ WP 4.8+ Updated Nov 24, 2025
ddospingbackrpcxmlxml-rpc
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Disable XML-RPC Pingback Safe to Use in 2026?

Generally Safe

Score 100/100

Disable XML-RPC Pingback has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

Based on the provided static analysis and vulnerability history, the "disable-xml-rpc-pingback" plugin version 1.2.2 exhibits an exceptionally strong security posture. The code analysis reveals no identifiable attack vectors such as unprotected AJAX handlers, REST API routes, shortcodes, or cron events. Furthermore, the absence of dangerous functions, SQL injection vulnerabilities, unescaped output, file operations, external HTTP requests, and critical taint flows all point to a meticulously coded and secure plugin. The vulnerability history further reinforces this, showing zero known CVEs and no recorded common vulnerability types, indicating a history of secure development.

Vulnerabilities
None known

Disable XML-RPC Pingback Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Disable XML-RPC Pingback Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
0 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0
Attack Surface

Disable XML-RPC Pingback Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 3
filterxmlrpc_methodsdisable-xml-rpc-pingback.php:27
actionwpdisable-xml-rpc-pingback.php:45
filterwp_headersdisable-xml-rpc-pingback.php:55
Maintenance & Trust

Disable XML-RPC Pingback Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedNov 24, 2025
PHP min version5.6
Downloads420K

Community Trust

Rating78/100
Number of ratings14
Active installs60K
Developer Profile

Disable XML-RPC Pingback Developer Profile

Samuel Aguilera

14 plugins · 98K total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Disable XML-RPC Pingback

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

HTML / DOM Fingerprints

FAQ

Frequently Asked Questions about Disable XML-RPC Pingback