João Luís

WordPress allows you to define a site logo (through Jetpack) and a site icon, why would you need to upload another image to use in your login page?
This plugin allows you to forget the login page. Just activate it and all the magic is done for you. No extra steps required.
The plugins uses the site logo if it exists, otherwise it will use the site icon. If none of them exist, the plugin will not touch your login page.

JL Login Logo

Uses your site logo (defined through Jetpack) or your site icon as the logo on the login form.

Pascal CESCATO

Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes while maintaining compatibility with essential services like Jetpack and WooCommerce.
Features:
<ul>
<li>Three security modes: Full Disable, Guest Disable, or Selective Blocking</li>
<li>Blocks dangerous methods: system.multicall, pingback.ping, and more</li>
<li>Compatible with Jetpack and WooCommerce</li>
<li>Optional user enumeration blocking</li>
<li>Attack logging for monitoring</li>
<li>Zero configuration required – works out of the box</li>
<li>Clean, intuitive admin interface</li>
</ul>

Stop XML-RPC Attacks

Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.

JL Login Logo vs Stop XML-RPC Attacks