Max Cutler

<p>Uses PHP’s output buffering to buffer XML-RPC responses and strip superfluous whitespace.</p>
<p>Plugins, themes, and any other files executed during the WordPress load process can unintentionally emit whitespace,<br />
such as by including a newline character after an explicit closing “?>” PHP tag instead of letting PHP auto-close the<br />
file.</p>


XML-RPC De-whitespacer

Removes leading and trailing whitespace from XML-RPC responses that can break some XML-RPC clients.

Pascal CESCATO

<p>Secure your site’s XML-RPC by removing some methods, instead of disabling totally XML-RPC, which is needed by some plugins (eg. Jetpack) and some mobile apps.</p>
<h4>Features</h4>
<p>Removes the following methods from XML-RPC interface.</p>
<ul>
<li>system.multicall</li>
<li>system.listMethods</li>
<li>system.getCapabilities</li>
<li>pingback.extensions.getPingbacks</li>
<li>pingback.ping</li>
<li>X-Pingback from HTTP headers</li>
</ul>
<p>This is not perfect, but it will help prerventing attacks</p>
<h4>Requirements</h4>
<ul>
<li>WordPress 5.0 or higher.</li>
</ul>


stop XML-RPC Attacks

Secure your site's XML-RPC by removing some methods, while you can still use XML-RPC.

XML-RPC De-whitespacer vs stop XML-RPC Attacks