Login Delay Shieldv2.7.0
Login Delay Shield slows down brute-force attacks by adding a configurable delay to failed login attempts while keeping successful logins instant.
Alternatives to Stop XML-RPC Attacks
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Khushal Login Path Guardv2.4.1
Change your WordPress login URL and protect your site from brute-force attacks. Blocks default login paths with 404 errors.
WT Hardeningv1.0.7
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Holographic Login Shieldv1.0.15
Lightweight login protection, brute-force defence and safer admin access controls for WordPress.
Vortix Web Securityv2.2.0
Free, offline-first WordPress security hardening with 15 configurable protection modules and a 20-point local security scan.
WebDoktoru Securityv1.0.2
Simple and effective security measures for your WordPress site. Many security features you can activate with a single click.
Limit login attempts the smart way: stops password-guessing bots and botnets on wp-login, WooCommerce and XML-RPC, without locking out real people.
IC Security Guardv1.3.0
Protect your site from brute force attacks with hidden login, login lockout, Email OTP 2FA, REST API & XML-RPC hardening, and real-time email alerts.
Free brute-force login protection and XML-RPC blocking, plus an optional bot firewall backed by the live ZeroBot threat network.
Authyo Passwordless Loginv1.0.11
WordPress login security with brute-force protection, IP manager, security logs, XML-RPC protection, REST API protection, and passwordless OTP login.