xmlrpc_enabled filter-hookWP 3.5.0

Filters whether XML-RPC methods requiring authentication are enabled.

Contrary to the way it's named, this filter does not control whether XML-RPC is fully enabled, rather, it only controls whether XML-RPC methods requiring authentication - such as for publishing purposes - are enabled.

Further, the filter does not control whether pingbacks or other custom endpoints that don't require authentication are enabled. This behavior is expected, and due to how parity was matched with the enable_xmlrpc UI option the filter replaced when it was introduced in 3.5.

To disable XML-RPC methods that require authentication, use:

add_filter( 'xmlrpc_enabled', '__return_false' );

For more granular control over all XML-RPC methods and requests, see the xmlrpc_methods and xmlrpc_element_limit hooks.


add_filter( 'xmlrpc_enabled', 'wp_kama_xmlrpc_enabled_filter' );

 * Function for `xmlrpc_enabled` filter-hook.
 * @param bool $is_enabled Whether XML-RPC is enabled.
 * @return bool
function wp_kama_xmlrpc_enabled_filter( $is_enabled ){

	// filter...
	return $is_enabled;
Whether XML-RPC is enabled.
Default: true


Since 3.5.0 Introduced.

Where the hook is called

wp-includes/class-wp-xmlrpc-server.php 221
$this->is_enabled = apply_filters( 'xmlrpc_enabled', $is_enabled );

Where the hook is used in WordPress

Usage not found.