[WordPress] 外掛分享： Disable XML-RPC – Dashboard Control

內容簡介

此外掛允許用戶快速在控制台上開啟或關閉 XML-RPC 功能，並在安裝後預設禁用該功能。它顯示當前的啟用/禁用狀態，幫助用戶避免不必要的訪問，並提供 XML-RPC 的速率限制功能以增強安全性。

【主要功能】
• 快速開關 XML-RPC 功能
• 顯示當前狀態於控制台
• 預設禁用 XML-RPC 功能
• 提供速率限制保護
• 不收集或傳輸用戶數據

外掛標籤

開發者團隊

原文外掛簡介

This plugin allows you to quickly toggle on/off XML-RPC functionality from the Dashboard
On initial installation and activation, XML-RPC will be disabled,
It displays the current enabled/disabled status in the dashboard, helping users avoid leaving access on unnecessarily.
It features XML-RPC rate limiting functionality, providing some protection to users while XML-RPC is on.
Rate limiting is on by default, but can be turned off. Note that it’s not perfect security however, and we recommend XML-RPC is disabled after use.

Why Control XML-RPC?
XML-RPC is a WordPress feature that allows remote access to your site. While useful for legitimate applications like mobile apps and remote publishing, it’s frequently exploited for:

Brute force password attacks
DDoS amplification attacks via pingbacks
Spam distribution
Resource exhaustion

Rate Limiting Protection
When enabled, the plugin automatically limits:

Failed Authentication – Maximum 5 failed login attempts per hour per IP
High-Risk Methods – Limits on pingback.ping, system.multicall, and other abuse-prone methods
IP Validation – Validates addresses and processes proxy headers correctly. Sites where the client connects directly are protected against IP spoofing automatically; sites behind a reverse proxy or CDN can declare their proxies via the xmlrpc_control_trusted_proxies filter so forwarded headers are only trusted from those addresses

Privacy
This plugin does not collect, store, or transmit any user data outside your WordPress installation. All rate limiting data is stored temporarily using WordPress transients and is automatically cleaned up.
Additional Information
Support
For support, feature requests, or bug reports, please visit the plugin’s support forum.
Contributing
Feedback is welcome.
Security
If you discover a security vulnerability, please report it responsibly via the WordPress security team or directly to the plugin author.

延伸相關外掛

Wordfence Security – Firewall, Malware Scan, and Login SecurityWordfence Security 是一款專為 WordPress 設計的安全外掛，...Hostinger ToolsHostinger Tools 是一款多合一網站管理外掛，協助 WordPress ...Really Simple Security – Simple and Performant Security (formerly Really Simple SSL)Really Simple Security 是一款輕量級且易於使用的 WordPress...Jetpack – WP Security, Backup, Speed, & GrowthJetpack 是一款功能強大的 WordPress 外掛，旨在提升網站內容...ManageWP WorkerManageWP Worker 是一款專為管理多個 WordPress 網站而設計的...Security Optimizer – The All-In-One Protection PluginSecurity Optimizer 是一款全方位的 WordPress 安全外掛，能...Safe SVGSafe SVG 是一個讓您在 WordPress 中安全上傳 SVG 檔案的最佳...LoginizerLoginizer 是一款 WordPress 外掛，旨在防止暴力破解攻擊，當...Limit Login Attempts Security – Login Security, 2FA, Firewall, Brute Force PreventionLimit Login Attempts Security 是一款專為 WordPress 設計的...All-In-One Security (AIOS) – Security and FirewallAll-In-One Security (AIOS) 是一款功能全面的 WordPress 安...User Role EditorUser Role Editor 外掛允許用戶輕鬆變更使用者角色和權限。用...MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple SitesMainWP Child 外掛可將你的 WordPress 網站安全連線至自架的 ...Kadence Security – Password, Two Factor Authentication, and Brute Force ProtectionKadence Security 是一款專為 WordPress 網站設計的安全外掛...Sucuri Security – Auditing, Malware Scanner and Security HardeningSucuri Security 外掛旨在保護您的 WordPress 網站，提供全面...SiteGuard WP PluginSiteGuard WP Plugin 旨在加強 WordPress 網站的登入及管理區...