Hardening WordPress to limit attack vectors
Disable XML-RPC Unless you are using the API, disable XML-RPC. Even if you are using it. Identify it you can limit access to a static IP address or range. This prevents script execution from remote sources attempting to gain access to your WordPress instance. The easiest way to disable XML-RPC is to add the followingRead more about Hardening WordPress to limit attack vectors[…]