Make two-factor mandatory for all WordPress users (emailed-code floor, per-role exclusions) and lock the XML-RPC/REST API-login path to an allowlist. Optional must-use mode.
Disable WordPress features: comments, emojis, embeds, heartbeat, XML-RPC, and more
Modular WordPress admin performance booster. 18 toggle-able modules: heartbeat throttle, dashboard widget cleanup, disable comments, REST lockdown, emoji/oEmbed disable, jQuery Migrate kill, classic editor, XML-RPC disable, hide login URL, custom login page,…
Security-Hardening für WordPress: User-Enumeration blocken, Feeds aus, Security-Header, WP-Schmodder und XML-RPC raus.
Omni Performance Hardening — single-file WordPress plugin that tames expensive endpoints (search scans, archive queries, low-value feeds, oEmbed, XML-RPC) with CDN-friendly cache headers. 收斂 WordPress 高成本端點的單檔外掛，並提供 CDN 友善快取標頭。
Modular WordPress ↔ Odoo ERP (v14+) bridge. 72 sync modules: e-commerce, CRM, forms, invoicing, memberships, donations, LMS, booking, helpdesk, affiliates & more. Async queue, dual transport (JSON-RPC / XML-RPC), encrypted credentials, webhooks,…
WordPress plugin to whitelist Jetpack IPs for XML-RPC access
Adds basic security features to WordPress
CoreSlim: zero-bloat WordPress core optimizer & speed switch. Disable emojis, XML-RPC, embeds, version disclosure, Heartbeat, revisions and autosave overhead with zero bloat. Free, GPL-2.0-or-later.
WordPress Security Plugin - Protects against XSS, file injection, brute force, XML-RPC attacks, and more. By Sravan M
A must-use WordPress plugin that turns off XML-RPC. No settings, no admin page: drop it in, and the XML-RPC surface is gone.
Blocks common WordPress paths for user enumeration, secures the REST API, disables user sitemaps, and protects against XML-RPC attacks.