keithlunt

A lightweight plugin that disables XML-RPC, restricts the REST API to logged-in users, and hides the WordPress version number

Janric Simple Security Hardening

A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.

Pascal CESCATO

Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes while maintaining compatibility with essential services like Jetpack and WooCommerce.
Features:
<ul>
<li>Three security modes: Full Disable, Guest Disable, or Selective Blocking</li>
<li>Blocks dangerous methods: system.multicall, pingback.ping, and more</li>
<li>Compatible with Jetpack and WooCommerce</li>
<li>Optional user enumeration blocking</li>
<li>Attack logging for monitoring</li>
<li>Zero configuration required – works out of the box</li>
<li>Clean, intuitive admin interface</li>
</ul>

Stop XML-RPC Attacks

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

Janric Simple Security Hardening vs Stop XML-RPC Attacks