Authyo Passwordless Loginv1.0.11
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.
Alternatives to Disable XML-RPC-API
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
MSC Stealth Loginv1.3.2
Hide wp-login.php behind a custom login URL and stop brute-force attacks — lockouts, IP allowlist, login history, email alerts. No tracking.
Fixora Disable XML-RPCv1.0.1
Fixora disable xml-rpc and xmlrpc pingback with a blocked-attempt log—see recent blocks in Settings.
Simple Disable XML-RPCv1.4.1
Safely disable XML-RPC, block attacks with HTTP 403, stop pingback DDoS, and protect your WordPress site with a single click.
Stop XML-RPC Attacksv2.0.0
Blocks dangerous XML-RPC methods while preserving Jetpack, WooCommerce, and mobile apps compatibility.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
Holographic Login Shieldv1.0.15
Lightweight login protection, brute-force defence and safer admin access controls for WordPress.
Security Safev3.0.1
This security plugin helps you quickly audit, harden, and secure your WordPress website.
WT Hardeningv1.0.7
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Khushal Login Path Guardv2.4.1
Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.