Security-Hardening für WordPress: User-Enumeration blocken, Feeds aus, Security-Header, WP-Schmodder und XML-RPC raus.
Plugin WordPress de Caracool: desactiva comentarios en todo el sitio y activa un modo de mantenimiento, en un unico plugin ligero sin dependencias externas.
WordPress Security & Performance Booster — disable auto-updates, block spam (comments, pingbacks, XML‑RPC), hide admin notices, and optimize admin performance. Ideal for staging and expert-managed sites.
Продвинутая система безопасности: блокировка IP, защита wp-login.php и xmlrpc.php, блокировка опасных файлов и ботов с поддержкой ASN, автоматическая блокировка при брутфорс атаках
CoreSlim: zero-bloat WordPress core optimizer & speed switch. Disable emojis, XML-RPC, embeds, version disclosure, Heartbeat, revisions and autosave overhead with zero bloat. Free, GPL-2.0-or-later.
Lightweight WordPress hardening plugin — blocks brute-force logins with IP banning, traps bots with honeypots, and disables risky features. All toggleable, zero phone-home.
WordPress Security Plugin - Protects against XSS, file injection, brute force, XML-RPC attacks, and more. By Sravan M
"WordPress optimization plugin with security and performance toggles. Includes brute force login protection, XMLRPC blocking, Heartbeat API control, emoji and oEmbed disabling, and a media library size viewer."
A must-use WordPress plugin that turns off XML-RPC. No settings, no admin page: drop it in, and the XML-RPC surface is gone.
Blocks common WordPress paths for user enumeration, secures the REST API, disables user sitemaps, and protects against XML-RPC attacks.
Blackbird Consulting Core Functionality Plugin
Enhanced WordPress login security with custom login page, rate limiting, XMLRPC blocking, and advanced protection against automated attacks