“xmlrpc”

WordPress security & hardening plugin scaffold for BCM Network (login protection, REST/XML-RPC hardening, integrity scan, alerts).

WordPress must-use plugin: closes the default anonymous surface (XML-RPC, user enumeration, fingerprints, comments, login errors, application passwords). Same file on every site nitida runs.

Hardening de segurança para WordPress. Bloqueia enumeração de usuários, REST API sensível, XML-RPC, RSS de autores e oEmbed.

Disable XMLRPC Completely. Also, allow Updates on Git-Controlled Websites

A single-file WordPress plugin for fine-grained control over XML-RPC and REST API endpoints. Toggle XML-RPC globally or per-user role, disable specific REST routes, and log blocked requests for security monitoring.

Hardening estrutural para WordPress

This plugin disables WordPress's XML-RPC system.

A small, honest WordPress firewall. No cloud, no telemetry, no upsells - just deterministic protections for shared-hosting sites.

Zero-admin-UI bot and brute-force protection for WordPress and WooCommerce. Honeypot, timing trap, and login lockout that covers every auth vector: wp-login, WooCommerce, XML-RPC, REST.

BlockForce WP: A simple WordPress security plugin that blocks attacker IPs and automatically hides your login URL

Cancel everything you don't need. Make WordPress more secure. Take care of all your transactions with a single plugin.

Disables XML-RPC, hides login page, adds rate limiting, and enhances WordPress security.

WordPress-plugin for bildekomprimering (WebP), sikkerhet og ytelse

RoniPass turns a practical WordPress security checklist into enforceable controls, visibility, and clear remediation guidance. It is intentionally conservative: the plugin applies safe application-level protections and reports infrastructure changes that should remain…

A simple mu-plugins for Wordpress to disable xmlrpc

This plugin disables XML-RPC API in WordPress 3.5+, which is enabled by default.

You can remove the XML-RPC pingback headers on your site with this WordPress Plugin.

Lightweight WordPress must-use plugin for agency-standard hardening. Disables comments, restricts REST API with plugin namespace whitelist, blocks XML-RPC abuse, removes emoji scripts, disables author archives and application passwords, strips version info, and…