Stop XML-RPC Attacks protects your WordPress site from XML-RPC brute force attacks, DDoS attempts, and reconnaissance probes while maintaining compatibility with essential services like Jetpack and WooCommerce.
Features:
Three security modes: Full Disable, Guest Disable, or Selective Blocking
Blocks dangerous methods: system.multicall, pingback.ping, and more
Compatible with Jetpack and WooCommerce
Optional user enumeration blocking
Attack logging for monitoring
Zero configuration required – works out of the box