DeveloperWil

Completely disables the XML-RPC API which was introduced in WordPress 3.5 and above which lets remote clients post, upload and edit content.
Notes: 
If you are using the WordPress smart phone app or the Jetpack plugin, please note that they need this service enabled.
If you activate this plugin your WordPress phone app will not be able to connect to your site and Jetpack will not be able to connect to wordpress.com where site visitor data (and other stuff) is stored.
Other plugins and services that use the XML-RPC API will also not function properly.
<h4>Plugin Page</h4>
<a href="https://zeropointdevelopment.com/wordpress-plugins/deactivate-xml-rpc-service-wordpress-plugin/" title="Deactivate XML-RPC Service WordPress Plugin" rel="nofollow ugc">Deactivate XML-RPC</a>

Deactivate XML-RPC Service

Disables the XMP-RPC API service introduced in WordPress 3.5 and above.

tildemark

This plugin will completely disable or deactivate XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website using XML-RPC.
By using the plugin, it will remove your ability to post using XML-RPC protocol, which means no more,
<ul>
<li>post ping backs, </li>
<li>remote post from WordPress mobile app, </li>
<li>remote post from windows live writer, </li>
<li>and other applications that requires XML-RPC.</li>
</ul>

Deactivate XML-RPC on WordPress

This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …

Deactivate XML-RPC Service vs Deactivate XML-RPC on WordPress