Kasuga

StickEasy Protected Contact Form is the fastest way to get a functional contact form on your WordPress site. This plugin is focused on simplicity and speed, allowing you to create a minimal contact form by simply placing a shortcode on any page.
There’s no complex setup or field builder. Just install, place the shortcode, and start receiving messages.
As an added benefit, the form includes built-in basic spam protection (honeypot, submission time check, and badwords filter) to keep most automated bots away without the need for CAPTCHAs or third-party services.
<h3>Usage</h3>
<h3>1. Simple Setup (Shortcode)</h3>
To instantly add the contact form, insert the following shortcode into any post or page:
<code>[spcf_form]</code>
<h3>2. Basic Customization</h3>
You can adjust the basic form behavior from Settings → StickEasy Contact. 
The following options are available:
Contact Form Settings
<ul>
<li>
Edit Form Labels
<ul>
<li>Customize the visible labels for each field (Name, Email, Message) to match your website’s tone or language. 
NOTE: Basic HTML such as <code></code> or <code> </code> can be used for emphasis or formatting.</li>
</ul>
</li>
<li>
Toggle the Name field on or off with a single checkbox. Useful when you prefer a shorter form or want to accept anonymous messages.
</li>
<li>
Specify the recipient email address for messages. 
By default, messages are sent to the Administration Email Address set in your WordPress settings (“Settings” → “General”).
</li>
<li>
Custom Success Message
<ul>
<li>Edit the message shown after the form is successfully submitted. 
You can also use simple HTML formatting, such as <code> </code>for line breaks. 
Example: “Thank you!<code> </code>We will get back to you within 2 business days.”</li>
</ul>
</li>
</ul>
Spam Protection Settings
<ul>
<li>
Enable or disable all built-in spam protection features at once. 
Included protections: Honeypot, Submission Time Check, and Forbidden Word Filter.
</li>
<li>
Minimum Submission Time 
Set the minimum number of seconds a visitor must remain on the page before submitting. 
A value between 3 and 10 seconds is generally recommended.
</li>
<li>
Forbidden Word Filter 
Add blocked words, domains, email patterns, or IP addresses to prevent spam submissions. 
Note: 
The Forbidden Word Filter list also applies to the visitor’s email address and IP address, not just the message body. 
Examples: 
　<code>viagra</code> 
　<code>bit.ly</code> 
　<code>visitor@email.com</code> 
　<code>123.45.67.89</code>
</li>
</ul>

StickEasy Protected Contact Form

Just drop the shortcode on any page — your super simple, hassle-free contact form is ready!

openzenta

This plugin disables the XML-RPC functionality in WordPress by using the <code>xmlrpc_enabled</code> filter. XML-RPC can be used for brute-force attacks and other malicious purposes. Most WordPress sites do not require it anymore.
<h3>Further Information</h3>
<a href="https://openzenta.com" rel="nofollow ugc">Support and more information</a>
Features:
<ul>
<li>Disables all XML-RPC functionality</li>
<li>Shows a one-line admin notice (visible to administrators only, on the Dashboard)</li>
<li>No settings, no bloat</li>
</ul>
This plugin is lightweight and suitable for minimal or security-focused setups.
<h3>Credits</h3>
Maintained by openzenta. Suggestions and contributions welcome!

xml rpc off now

Disables XML-RPC in WordPress for improved security. Lightweight, no settings.

StickEasy Protected Contact Form vs xml rpc off now