Jonny Harris

Simple plugin that disables XML-RPC, since it is enabled by default on WordPress 3.5 and above. It also removed references in the headers and in the body of the html.
If you wish to follow the development of this plugin, view the code on the official plugin <a href="http://www.jonathandavidharris.co.uk/scripts/disable-xml-rpc-fully/" title="website" rel="nofollow ugc">website</a> or follow me on twitter <a href="https://twitter.com/thespacedmonkey" rel="nofollow ugc">@thespacedmonkey</a>

Disable XML RPC Fully

Walter Ebert

This plugin does more than just using the <code>xmlrpc_enabled</code> hook, because that is only used “To disable XML-RPC methods that require authentication”.
Activating this plugin will also disable pingbacks, trackbacks, and Really Simple Discovery (RSD), because these rely on XML-RPC.
It works with any webserver, because it does not use the .htaccess file.
<h4>Testing the plugin</h4>
From the command line you can test if the plugin is working correctly using <a href="https://curl.haxx.se/" rel="nofollow ugc">cURL</a>. Replace the <code>example.com</code> link to match your website:
<pre><code>curl -d '<?xml version="1.0"?><methodCall><methodName>system.listMethods</methodName><params><param><value><string/></value></param></params></methodCall>' https://example.com/xmlrpc.php
</code></pre>
This should only return the following methods: 
– <code>system.multicall</code> 
– <code>system.listMethods</code> 
– <code>system.getCapabilities</code>

Remove XML-RPC Methods

Remove all WordPress methods from the XML-RPC API to increase security.

Disable XML RPC Fully vs Remove XML-RPC Methods