Walter Ebert

<p>This plugin does more than just using the <code>xmlrpc_enabled</code> hook, because that is only used “To disable XML-RPC methods that require authentication”.</p>
<p>Activating this plugin will also disable pingbacks, trackbacks, and Really Simple Discovery (RSD), because these rely on XML-RPC.</p>
<p>It works with any webserver, because it does not use the .htaccess file.</p>
<h4>Testing the plugin</h4>
<p>From the command line you can test if the plugin is working correctly using <a href="https://curl.haxx.se/" rel="nofollow ugc">cURL</a>. Replace the <code>example.com</code> link to match your website:</p>
<pre><code>curl -d '<?xml version="1.0"?><methodCall><methodName>system.listMethods</methodName><params><param><value><string/></value></param></params></methodCall>' https://example.com/xmlrpc.php
</code></pre>
<p>This should only return the following methods:<br />
– <code>system.multicall</code><br />
– <code>system.listMethods</code><br />
– <code>system.getCapabilities</code></p>


Remove XML-RPC Methods

Remove all WordPress methods from the XML-RPC API to increase security.

David Matthew

<p>TrimPress optimizes and trims some of the cruft from WordPress for a lighter, more secure theme!</p>
<h3>Features</h3>
<ul>
<li>Slow down the Heartbeat API to save on admin-ajax usage.</li>
<li>Disable cart fragments, a resource-intensive WooCommerce script (TrimPress automatically detects WooCommerce and only shows this option if it is active).</li>
<li>Remove unnecessary clutter from the WordPress  section, like RSS, RSD, WLW manifest and adjacent post links.</li>
<li>Disable the built-in WordPress code editors that allow users to modify plugin and theme code.</li>
<li>Limit post revisions, which can cause unnecessary database bloat.</li>
<li>Disable automatic emoji rendering, which adds several extra scripts and styles to your site.</li>
<li>Disable the XML-RPC interface, an older system for remote WordPress access that can be exploited by hackers. </li>
<li>Remove the meta generator tag and version url parameters that let potential attackers know what WordPress version you’re using.</li>
<li>Disable comment autolinking, a feature often exploited by spammers.</li>
</ul>
<h3>Development</h3>
<ul>
<li>Namespaced and object-oriented code.</li>
<li>Adheres to <a href="https://github.com/WordPress/WordPress-Coding-Standards" rel="nofollow ugc">WordPress Coding Standards</a>.</li>
</ul>


TrimPress

TrimPress optimizes and trims some of the cruft from WordPress for a lighter, more secure theme!

Remove XML-RPC Methods vs TrimPress