=== WordShield Security - Disable XML-RPC=== Contributors: storeprose Donate link: https://ko-fi.com/storeprose Tags: security, disable xmlrpc Requires at least: 5.0 Tested up to: 6.7.1 Stable tag: 1.0.0 Requires PHP: 7.2 License: GPLv2 or later License URI: https://www.gnu.org/licenses/gpl-2.0.html WordShield Security is a comprehensive WordPress security plugin that protects your website from the most common vulnerabilities and cyber attacks. == Description == WordShield Security is a comprehensive **WordPress security plugin** that protects your website from the most common vulnerabilities and cyber attacks. **Live Demo** - You can preview the complete plugin functionality in the WordPress Playground using the Live Preview button. ##Why do you need a Security Plugin for WordPress? If you are online, you are vulnerable to cyber-attacks and threats. However since WordPress is the leading CMS available today, bad players are always looking for ways to exploit a website powered by WordPress. Automated attacks by bots or manual attacks singled on your website or business make your site vulnerable. This is why you need a comprehensive security plugin like WordShield Security to protect your digital assets. ## What is the difference between WordShield Security and other Security plugins? Every WordPress plugin adds some overhead to the website and impacts the performance. We are aware of this. So, we have coded this WordPress security plugin with utmost care and caution. Some of the key features of this plugin are: ✅ WordShield security has absolutely **zero** bloat. ✅ This WordPress security plugin is not a Swiss knife claiming to do everything. ✅ Our focus is to address the most common vulnerabilities. ✅ WordShield Security is lightweight and ultrafast. ***It added only a millisecond of execution time in our internal testing.*** ✅ It follows the WordPress best practices and does not modify any Core File. ✅ WordShield Security never touches your .htaccess. It protects your website in a fail-safe way. ##Features of WordShield Security You can take care of the following security aspects of your WordPress assets by activating this WordPress Security plugin. ###Disable XML-RPC Enabling XML-RPC makes your web property vulnerable to remote code injection. An attacker can easily exploit this weakness to execute arbitrary commands or code in the webserver, facilitating various attacks including unauthorized remote access. XML-RPC is enabled by default in a WordPress installation. You can protect your website from the XML-RPC vulnerability by ticking a checkbox in the plugin's settings. ###Hide Generator tags WordPress and WooCommerce include the generator tags by default. But this has a serious security impact as potential attackers can easily identify the specific version of WordPress (or WooCommerce) you are using. This can expose vulnerabilities and make your site more susceptible to hacking attempts. You can easily remove the generator tags and mask your website's technical details from the public view using WordShield Security. ###Disable PHP Editing Nobody wants to break a live website by accidentally updating the themes and plugins from the WordPress Admin dashboard. You can easily disable PHP editing using WordShield Security so that nobody can accidentally change anything. **Note: The current version of the WordShield Security plugin does not work in a multisite environment.** ##Upcoming Features Here are some of the upcoming features of this WordPress security plugin: 👉 Limit login attempts. 👉 Add security headers. 👉 Change default login URL. 👉 Disable theme changes. 👉 Username audits. 👉 Enforce password policies. 👉 Stop user enumerations. 👉 Support for multisite. 👉 IP Ban. 👉 Prevent code execution. 👉 Backup & Restore. 👉 Logs, Notifications, and more! ##Maintenance and Support This extension is well-supported and tested for compatibility with each WordPress upgrade. == Installation == This section describes how to install the plugin and get it working. 1. Install the plugin directly through the WordPress plugin directory. 2. Activate it. 3. Configure the plugin functionality using the Settings panel. == Frequently Asked Questions == = The changes made in the plugin settings do not seem to reflect. Why? = This may happen because of some extreme cache mechanisms by your Cache plugin or CDN provider. Please clear the cache and check again. = Can I use this plugin in a multisite environment? = The current version of the WordShield Security plugin does not support Multisite. However, this feature is in our future roadmap. = Whom to contact for any support? = Please log a support request on the plugin support page. We will respond as soon as possible. = I am looking for a new feature. How do I request a new feature for this plugin? = We would love to hear your ideas on enhancing this WordPress security plugin. Please log a request on the plugin support page. We will respond as soon as possible. == Screenshots == 1. Settings panel of the WordShield security plugin. == Changelog == **08 Jan 2025 - Version 1.0.0** * Disable XML-RPC * Hide WordPress and WooCommerce generator tags * Disable PHP file editing. == Upgrade Notice == The plugin is upgraded with fixes and enhancements. It is advised to keep the plugin up-to-date. 1.0.0 Initial version.