A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.
Alternatives to Version Cloak
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Maasters Security Shieldv1.1.6
Practical WordPress hardening with configurable security headers, CSP modes, login rate limiting, XML-RPC controls, and version hiding.
Metadas Version Removalv1.1.1
A lightweight, zero configuration plugin that removes all WordPress version output from your site for improved security and cleaner markup.
Lightweight attack detection for WordPress. Logs brute force, XML-RPC abuse, SQL injection, XSS attempts and more. No bloat, no blocking — just data.
Decoded Site Diagnosticsv1.0.0
Understand your WordPress health, performance, security and WP-Cron status with clear, actionable explanations.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
WT Hardeningv1.0.7
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Lock down the WordPress comment attack surface with layered protections while preserving existing comment data.
Open24 Securityv1.3.0
Security hardening for WordPress and WooCommerce: lock down the REST API and login, limit admin accounts, get alerts and detect modified files.
Diagnoses WordPress security settings and version status, presenting plain-language improvement steps in Japanese. No external requests. Lightweight.