A simple and lightweight plugin to disable XML-RPC API, X-Pingback and pingback-ping in WordPress 3.5+ for a faster and more secure website
Allows administrators to disable comments on their website. Comments can be disabled according to Post, Page, Media type.
Enable/Disable XML-RPC for all or based on IP list, also you can control pingback and Unset X-Pingback from HTTP headers.
This plugin utilizes the native WordPress filter "xmlrpc_enabled" to deactivate the XML-RPC API on a WordPress site running version 3.5 or higher.