Swellfire

This plugin disables the XML-RPC API on a WordPress site running 3.5 or above and unsets the X-Pingback header.
Beginning in 3.5, XML-RPC is enabled by default. Additionally, the option to disable/enable XML-RPC was removed. For various reasons, site owners may wish to disable this functionality. This plugin provides an easy way to do so.

Disable XML-RPC & Unset X-Pingback

This plugin disables XML-RPC API in WordPress 3.5+, which is enabled by default.

Automattic

daniloercoli

Jorge Bernal

Make XML-RPC work if you rename the file. Some hosts block access to xmlrpc.php file making it impossible to use

Rename XMLRPC

Make XML-RPC work if you rename the file. Some hosts block access to xmlrpc.php file making it impossible to use

Disable XML-RPC & Unset X-Pingback vs Rename XMLRPC