Secure your site’s XML-RPC by removing some methods, instead of disabling totally XML-RPC, which is needed by some plugins (eg. Jetpack) and some mobile apps.
Removes the following methods from XML-RPC interface.
- X-Pingback from HTTP headers
This is not perfect, but it will help prerventing attacks
- WordPress 5.0 or higher.
- Extract the zip file and just drop the contents in the
wp-content/plugins/directory of your WordPress installation or install it directly from your dashboard and then activate the plugin from Plugins page.
- There’s not options page, simply install and activate.
Is there something to do after install?
Yes, just activate it!
I already have a security plugin, do I need this plugin too?
It depends on your security plugin. Some secure XML-RPC, some just allow you to enable or disable it, some can stop attacks as Stop XML-RPC Attacks does. So you may have to read your security plugin FAQ / doc.
以下人員參與了開源軟體〈stop XML-RPC Attacks〉的開發相關工作。參與者
- Initial release