1
Require Email 2FA
WP Registry grade A. No security issues foundGradeANo security issues foundWP Registry
Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
★ 1179≈30