ishitaka

<p>XO Security is a plugin to enhance login related security.<br />
This plugin does not write to .htaccess file. Besides Apache, LiteSpeed, Nginx and IIS also work.</p>
<h4>Functions</h4>
<ul>
<li>Record login log.</li>
<li>Limit login attempts.</li>
<li>Add Captcha to the login form and comment form.</li>
<li>Change the URL of the login page.</li>
<li>Enable two-factor authentication (2FA) for login.</li>
<li>Login Alert.</li>
<li>Disable login by mail address.</li>
<li>Disable login by user name.</li>
<li>Change login error message.</li>
<li>Disable XML-RPC and XML-RPC Pingback.</li>
<li>Disable REST API.</li>
<li>Disable author archive page.</li>
<li>Remove comment author class of comments list.</li>
<li>Remove the username from the oEmbed response data.</li>
<li>WooCommerce login page protection.</li>
<li>Anti-spam comment.</li>
<li>Hide WordPress version information.</li>
<li>Edit the author slug.</li>
<li>Disable RSS and Atom feeds.</li>
<li>Activate maintenance mode.</li>
<li>Delete the readme.html file.</li>
</ul>
<h4>WordPress multisite considerations</h4>
<p>If you set the login page separately for the main site and the subsite, you will not be able to use the password loss function of the subsite. We recommend that you set the login page to be common to all sites.</p>


XO Security

This is awesome plugin!
It has all the features I need and is very easy to use.

Awesome!

長年、SiteGuardを使っていましたが、たまにログインできなくなってプラグインをサーバーから削除とかしたりだったので、こちらのプラグインを使い始めました。
設定画面もわかりやすく、作動も安定していて、ログイン試行履歴とかも見れます（結構不正ログインされようとしているのがわかって楽しい）、随時他のサイトのセキュリティプラグインもこちらに切り替えていこうと思っています。感謝感謝

とても良い


This one plugin completes my security measures. Thanks !!


This one is all you need !

XO Security is a plugin to enhance login related security.

Lars Koudal

cleverplugins

<p>Prevent your WordPress site from participating and being a victim of pingback denial of service attacks. <strong>After activation the plugin automatically disables XML-RPC. There’s no need to configure anything.</strong></p>
<p>By disabling the XML-RPC pingback you’ll:<br />
* lower your server CPU usage<br />
* prevent malicious scripts from using your site to run pingback denial of service attacks<br />
* prevent malicious scripts to run denial of service attacks on your site via pingback</p>
<p>From sucuri.net:</p>
<blockquote>
<p>Any WordPress site with Pingback enabled (which is on by default) can be used in DDOS attacks against other sites.</p>
</blockquote>
<h4>Learn More</h4>
<ul>
<li><a href="http://wptavern.com/how-to-prevent-wordpress-from-participating-in-pingback-denial-of-service-attacks" rel="nofollow ugc">How To Prevent WordPress From Participating In Pingback Denial of Service Attacks</a> – wptavern.com</li>
<li><a href="http://blog.sucuri.net/2014/03/more-than-162000-wordpress-sites-used-for-distributed-denial-of-service-attack.html" rel="nofollow ugc">More Than 162,000 WordPress Sites Used for Distributed Denial of Service Attack</a> – sucuri.net</li>
<li><a href="http://hackguard.com/xmlrpc-php-ping-backs-hackers-denial-service-attacks" rel="nofollow ugc">xmlrpc.php and Pingbacks and Denial of Service Attacks, Oh My!</a> – hackguard.com</li>
</ul>
<h4>Is Your Site Attacking Others?</h4>
<p>Use <a href="http://labs.sucuri.net/?is-my-wordpress-ddosing" rel="nofollow ugc">Sucuri’s WordPress DDOS Scanner</a> to check if your site is DDOS’ing other websites</p>
<h4>Why Not Just Disable XMLRPC Altogether?</h4>
<p>Yes, you can choose to do that, but if you use popular plugins like JetPack (that use XMLRPC) then those plugins will stop working. That is why this small plugin exists.</p>


Remove & Disable XML-RPC Pingback

Great plugin, super easy to install and just sits there doing it's job. Very light as well, so has no effects that I could see, on site speed or memory usage. Can't think of a reason why you wouldn't be using this to be honest. Thanks for developing it!

Just what I needed

Prevent pingback, XML-RPC and denial of service DDOS attacks by disabling the XML-RPC pingback functionality.

XO Security vs Remove & Disable XML-RPC Pingback