tildemark

<p>This plugin will completely disable or deactivate XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website using XML-RPC.</p>
<p>By using the plugin, it will remove your ability to post using XML-RPC protocol, which means no more,</p>
<ul>
<li>post ping backs, </li>
<li>remote post from WordPress mobile app, </li>
<li>remote post from windows live writer, </li>
<li>and other applications that requires XML-RPC.</li>
</ul>


Deactivate XML-RPC on WordPress

This plugin will completely disable or deactivates XML-RPC on your WordPress installation. This will prevent any brute force attacks to your website u …

ahriad

<p>Turbo Rate Limiter is a powerful yet easy-to-use security plugin that helps protect your WordPress site from various types of abuse by limiting the rate at which visitors can make requests.</p>
<h3>Features</h3>
<ul>
<li><strong>URI-based filtering</strong> – Set rate limits for specific URLs, paths, or patterns</li>
<li><strong>Multiple match types</strong> – Exact match, contains, starts with, ends with, or regex</li>
<li><strong>Flexible time windows</strong> – Configure rate limits per second, minute, or hour</li>
<li><strong>Multiple actions</strong> – Return HTTP 429, redirect to URL, or redirect to page</li>
<li><strong>Test mode</strong> – Preview rate limiting behavior without blocking visitors</li>
<li><strong>Debug panel</strong> – Visual debug panel for administrators</li>
<li><strong>Cloudflare support</strong> – Full IPv4 and IPv6 proxy detection</li>
<li><strong>Localization ready</strong> – Translations available for multiple languages</li>
</ul>
<h3>Use Cases</h3>
<ul>
<li><strong>API protection</strong> – Limit API calls to prevent abuse</li>
<li><strong>Login protection</strong> – Prevent brute force attacks on login pages</li>
<li><strong>Form spam prevention</strong> – Limit form submission rates</li>
<li><strong>Resource protection</strong> – Protect heavy database queries</li>
<li><strong>CDN compatibility</strong> – Works with Cloudflare and other proxies</li>
</ul>
<h3>Arbitrary section</h3>
<h3>Developer API</h3>
<p>Turbo Rate Limiter provides hooks and filters for developers:</p>
<pre><code>// Add trusted proxy IPs
add_filter('turbo_rate_limiter_trusted_proxies', function() {
    return [
        '173.245.48.0/20',
        '2400:cb00::/32',
        // More ranges...
    ];
});

// Access rate limiter instance
$rate_limiter = TURBORL_Rate_Limiter::get_instance();
</code></pre>
<p>For full API documentation, see docs/developer-api.md.</p>


Turbo Rate Limiter

Protect your WordPress site from brute force attacks, API abuse, and DDoS attacks with customizable rate limiting rules.

Deactivate XML-RPC on WordPress vs Turbo Rate Limiter