內容簡介
總結文案：
XML-RPC 控制儀表板為 WordPress 管理員提供一種快速切換 XML-RPC 功能的方式。它可在初始安裝時禁用 XML-RPC，並在儀表板中顯示當前啟用/停用狀態，助於用戶避免不必要地保持訪問權。此外，它具有 XML-RPC 速率限制功能，為用戶提供保護，並自動限制失敗的身份驗證、高風險方法和 IP 驗證。
問題與答案：
1. 外掛初始安裝後 XML-RPC 的狀態是怎樣的？
答：XML-RPC 將會被禁用。
2. XML-RPC 控制儀表板在儀表板顯示的是什麼資訊？
答：當前啟用/停用狀態。
3. XML-RPC 控制儀表板提供了什麼功能以保護用戶？
答：它提供了 XML-RPC 速率限制功能。
4. 外掛啟用的速率限制是預設開啟的還是關閉的？
答：速率限制是預設開啟的，但可以關閉。建議在使用後禁用 XML-RPC，因為速率限制並非完美安全。
5. XML-RPC 為什麼需要控制？
答：因為 XML-RPC 是一個允許通過遠程訪問網站的 WordPress 功能，雖然對於合法應用如移動應用程式和遠程出版很有用，但也常被滥用用於暴力密碼攻擊、DDoS 增幅攻擊、垃圾郵件分發和資源枯竭。
外掛標籤
開發者團隊
② 後台搜尋「Disable XML-RPC – Dashboard Control」→ 直接安裝（推薦）
原文外掛簡介
XML-RPC Control Dashboard provides WordPress administrators with a way of quickly toggling on/off the XML-RPC functionality.
On initial installation and activation, XML-RPC will be disabled,
It displays the current enabled/disabled status in the dashboard, helping users avoid leaving access on unnecessarily.
It features XML-RPC rate limiting functionality, providing some protection to users while XML-RPC is on.
Rate limiting is on by default, but can be turned off. Note that it’s not perfect security however, and we recommend XML-RPC is disabled after use.
Why Control XML-RPC?
XML-RPC is a WordPress feature that allows remote access to your site. While useful for legitimate applications like mobile apps and remote publishing, it’s frequently exploited for:
Brute force password attacks
DDoS amplification attacks via pingbacks
Spam distribution
Resource exhaustion
Rate Limiting Protection
When enabled, the plugin automatically limits:
Failed Authentication – Maximum 5 failed login attempts per hour per IP
High-Risk Methods – Limits on pingback.ping, system.multicall, and other abuse-prone methods
IP Validation – Prevents IP spoofing by validating addresses and processing proxy headers correctly
Privacy
This plugin does not collect, store, or transmit any user data outside your WordPress installation. All rate limiting data is stored temporarily using WordPress transients and is automatically cleaned up.
Additional Information
Support
For support, feature requests, or bug reports, please visit the plugin’s support forum.
Contributing
Feedback is welcomed.
Security
If you discover a security vulnerability, please report it responsibly via the WordPress security team or directly to the plugin author.
