Joseph Scott

Work around for some versions of libxml2 2.7.x that strip out brackets when parsing XML. This plugin fixes XML-RPC requests that are mangled because of this problem. The real fix for this (making the use of this plugin unnecessary) is to use PHP 5.2.9+ with libxml2 2.7.3+.
For more information about this problem see <a href="https://core.trac.wordpress.org/ticket/7771" rel="nofollow ugc">https://core.trac.wordpress.org/ticket/7771</a>.

LibXML2 Fix

Work around for some versions of libxml2 2.7.x that strip out brackets when parsing XML.  This plugin fixes XML-RPC requests that are mangled because  …

codegee0958

GhostGate is a lightweight yet powerful WordPress security plugin that eliminates the login page as an attack surface. Instead of just defending, it erases the entrance entirely with dynamic login URLs and multi-layer access verification.
<ul>
<li>🔒 Hide your login URL with a custom slug and time-based code</li>
<li>🔑 Built-in 2FA via email verification</li>
<li>🚫 Auto-block brute force attacks by IP</li>
<li>🧱 Disable/limit unused endpoints like XML-RPC and REST API</li>
<li>👤 Prevent user enumeration via REST, RSS, and author queries</li>
<li>🔍 Visualize security status and detect conflicts</li>
<li>📜 Activity logs with optional file rotation</li>
</ul>
GhostGate doesn’t just defend — it disappears. 
Invisible to bots. Intuitive for users.
👉 Full features / screenshots / pricing / docs: 
https://arce-experience.com/product/
<h3>Privacy</h3>
GhostGate can store the following data locally on your site to provide rate-limiting and security auditing: 
– IP addresses (for temporary throttling / block lists) 
– Timestamps and event metadata (login attempts, REST/XML-RPC hits) 
– Optional log files under <code>wp-content/uploads/ghostgate/logs</code> (if enabled)
No data is sent to third-party services. 
Site owners are responsible for informing users/visitors where required by local laws. You can clear blocks/logs from the admin UI or by deleting the log files.

GhostGate

Invisible, intelligent protection for WordPress. GhostGate hides your login page, blocks bots, and turns your site into a ghost fortress.

LibXML2 Fix vs GhostGate