“xml-rpc” 10

Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.

Omni Performance Hardening — single-file WordPress plugin that tames expensive endpoints (search scans, archive queries, low-value feeds, oEmbed, XML-RPC) with CDN-friendly cache headers. 收斂 WordPress 高成本端點的單檔外掛，並提供 CDN 友善快取標頭。

Disable WordPress XML-RPC via actions and filters.

Modular WordPress ↔ Odoo ERP (v14+) bridge. 72 sync modules: e-commerce, CRM, forms, invoicing, memberships, donations, LMS, booking, helpdesk, affiliates & more. Async queue, dual transport (JSON-RPC / XML-RPC), encrypted credentials, webhooks,…

Completely disable comments: closes discussion everywhere, hides existing comments, and removes every comment surface from wp-admin, feeds, REST and XML-RPC.

WordPress plugin for JWT authentication for the REST / XML-RPC API

WordPress Security Plugin - Protects against XSS, file injection, brute force, XML-RPC attacks, and more. By Sravan M

Harden your WordPress site in minutes - no code, no config files, no subscription.

Customized version of Rename XMLRPC from Jorge Bernal. Make XML-RPC work if you rename the file. Some hosts block access to xmlrpc.php file making it impossible to use

WordPress plugin to disable XML-RPC.