Title: Stop XML-RPC Attacks
Author: Pascal CESCATO
Published: <strong>2019 年 4 月 26 日</strong>
Last modified: 2026 年 5 月 23 日

---

搜索插件

![](https://ps.w.org/stop-xml-rpc-attacks/assets/banner-772x250.png?rev=2075425)

![](https://ps.w.org/stop-xml-rpc-attacks/assets/icon-256x256.png?rev=2075425)

# Stop XML-RPC Attacks

 作者：[Pascal CESCATO](https://profiles.wordpress.org/pcescato/)

[下载](https://downloads.wordpress.org/plugin/stop-xml-rpc-attacks.2.0.0.zip)

 * [详情](https://cn.wordpress.org/plugins/stop-xml-rpc-attacks/#description)
 * [评价](https://cn.wordpress.org/plugins/stop-xml-rpc-attacks/#reviews)
 *  [安装](https://cn.wordpress.org/plugins/stop-xml-rpc-attacks/#installation)
 * [开发进展](https://cn.wordpress.org/plugins/stop-xml-rpc-attacks/#developers)

 [支持](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/)

## 描述

Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks,
DDoS attempts, and reconnaissance probes while maintaining compatibility with essential
services like Jetpack and WooCommerce.

**Features:**

 * Three security modes: Full Disable, Guest Disable, or Selective Blocking
 * Blocks dangerous methods: system.multicall, pingback.ping, and more
 * Compatible with Jetpack and WooCommerce
 * Optional user enumeration blocking
 * Attack logging for monitoring
 * Zero configuration required – works out of the box
 * Clean, intuitive admin interface

## 安装

 1. Upload the plugin files to `/wp-content/plugins/stop-xmlrpc-attacks/`
 2. Activate the plugin through the ‘Plugins’ menu in WordPress
 3. Go to Settings > XML-RPC Security to configure (optional)

## 常见问题

### Will this break Jetpack?

No! The default “Selective Blocking” mode is fully compatible with Jetpack and WooCommerce.

### What’s the difference between the security modes?

 * **Full Disable**: Maximum security, disables XML-RPC completely
 * **Guest Disable**: Balanced approach, only allows XML-RPC for logged-in users
 * **Selective Blocking**: Best compatibility, only blocks dangerous methods

### How do I enable logging?

Go to Settings > XML-RPC Security and check “Enable Attack Logging”. Logs will be
written to your debug.log file when WP_DEBUG is enabled.

## 评价

![](https://secure.gravatar.com/avatar/b959b03e0bfa53fc258b2f1e22cfa5bc921f1f28d8f4b5c75afb22617b4d166d?
s=60&d=retro&r=g)

### 󠀁[Great](https://wordpress.org/support/topic/great-14892/)󠁿

 [Anonymous User 16344271](https://profiles.wordpress.org/anonymized-16344271/) 
2022 年 9 月 24 日 1 回复

Nice plugin thanks

![](https://secure.gravatar.com/avatar/9ed8d960761ad688c132f448fd549cda282c8868b0f9e9587ce5bed623d9694d?
s=60&d=retro&r=g)

### 󠀁[Works silently](https://wordpress.org/support/topic/works-silently-2/)󠁿

 [Sandip Roy](https://profiles.wordpress.org/sandip-roy/) 2022 年 2 月 21 日

It works silently in the background. This is the only security plugin I use, since
a W***fence update broke my site about a year back. Gives me a peace of mind.

![](https://secure.gravatar.com/avatar/c3e0ae8928317e1270c5e6559c165a762495a990ceac61b8b86557b0934d5b61?
s=60&d=retro&r=g)

### 󠀁[thanks](https://wordpress.org/support/topic/thanks-2200/)󠁿

 [baf285](https://profiles.wordpress.org/baf285/) 2022 年 1 月 7 日 1 回复

all good, thanks

![](https://secure.gravatar.com/avatar/aa109f51d0a70582dee4ee0220fbdfc40a6f5a8e65d762a55a624cb6b0b67a27?
s=60&d=retro&r=g)

### 󠀁[Simplet et efficace](https://wordpress.org/support/topic/simplet-et-efficace/)󠁿

 [lesgitesdusomail](https://profiles.wordpress.org/lesgitesdusomail/) 2019 年 10
月 17 日 1 回复

Tout est dans le titre. Reste à dire : Merci !

 [ 阅读所有4条评价 ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/)

## 贡献者及开发者

「Stop XML-RPC Attacks」是开源软件。 以下人员对此插件做出了贡献。

贡献者

 *   [ Pascal CESCATO ](https://profiles.wordpress.org/pcescato/)

「Stop XML-RPC Attacks」插件已被翻译至 2 种本地化语言。 感谢[所有译者](https://translate.wordpress.org/projects/wp-plugins/stop-xml-rpc-attacks/contributors)
为本插件所做的贡献。

[帮助将「Stop XML-RPC Attacks」翻译成简体中文。](https://translate.wordpress.org/projects/wp-plugins/stop-xml-rpc-attacks)

### 对开发感兴趣吗?

您可以[浏览代码](https://plugins.trac.wordpress.org/browser/stop-xml-rpc-attacks/)，
查看[SVN仓库](https://plugins.svn.wordpress.org/stop-xml-rpc-attacks/)，或通过[RSS](https://plugins.trac.wordpress.org/log/stop-xml-rpc-attacks/?limit=100&mode=stop_on_copy&format=rss)
订阅[开发日志](https://plugins.trac.wordpress.org/log/stop-xml-rpc-attacks/)。

## 更新日志

#### 2.0.0

 * Added admin interface with visual settings
 * Three security modes to choose from
 * Optional attack logging
 * Improved code quality and security
 * Full internationalization support

#### 1.0.1

 * Initial release
 * Basic blocking of dangerous methods

## 额外信息

 *  版本 **2.0.0**
 *  最后更新：**6 天前**
 *  活跃安装数量 **6,000+**
 *  WordPress 版本 ** 6.0 或更高版本 **
 *  已测试的最高版本为 **7.0**
 *  PHP 版本 ** 7.4 或更高版本 **
 *  语言
 * [English (US)](https://wordpress.org/plugins/stop-xml-rpc-attacks/) 、 [French (France)](https://fr.wordpress.org/plugins/stop-xml-rpc-attacks/)
   和 [German](https://de.wordpress.org/plugins/stop-xml-rpc-attacks/).
 *  [翻译成简体中文](https://translate.wordpress.org/projects/wp-plugins/stop-xml-rpc-attacks)
 * 标签
 * [Brute Force](https://cn.wordpress.org/plugins/tags/brute-force/)[ddos](https://cn.wordpress.org/plugins/tags/ddos/)
   [jetpack](https://cn.wordpress.org/plugins/tags/jetpack/)[security](https://cn.wordpress.org/plugins/tags/security/)
   [xmlrpc](https://cn.wordpress.org/plugins/tags/xmlrpc/)
 *  [高级视图](https://cn.wordpress.org/plugins/stop-xml-rpc-attacks/advanced/)

## 评级

 5 星（最高 5 星）。

 *  [  4 条 5 星评价     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=5)
 *  [  0 条 4 星评价     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=4)
 *  [  0 条 3 星评价     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=3)
 *  [  0 条 2 星评价     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=2)
 *  [  0 条 1 星评价     ](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/?filter=1)

[Your review](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/#new-post)

[查看全部评论](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/reviews/)

## 贡献者

 *   [ Pascal CESCATO ](https://profiles.wordpress.org/pcescato/)

## 支持

有话要说吗？是否需要帮助？

 [查看支持论坛](https://wordpress.org/support/plugin/stop-xml-rpc-attacks/)