tildemark

<p>This plugin will completely disable or deactivate XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website using XML-RPC.</p>
<p>By using the plugin, it will remove your ability to post using XML-RPC protocol, which means no more,</p>
<ul>
<li>post ping backs, </li>
<li>remote post from WordPress mobile app, </li>
<li>remote post from windows live writer, </li>
<li>and other applications that requires XML-RPC.</li>
</ul>


Deactivate XML-RPC on WordPress

This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …

Pascal CESCATO

<p>Secure your site’s XML-RPC by removing some methods, instead of disabling totally XML-RPC, which is needed by some plugins (eg. Jetpack) and some mobile apps.</p>
<h4>Features</h4>
<p>Removes the following methods from XML-RPC interface.</p>
<ul>
<li>system.multicall</li>
<li>system.listMethods</li>
<li>system.getCapabilities</li>
<li>pingback.extensions.getPingbacks</li>
<li>pingback.ping</li>
<li>X-Pingback from HTTP headers</li>
</ul>
<p>This is not perfect, but it will help prerventing attacks</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher.</li>
</ul>


stop XML-RPC Attacks

Secure your site's XML-RPC by removing some methods, while you can still use XML-RPC.

Deactivate XML-RPC on WordPress vs stop XML-RPC Attacks