Blocking WordPress xmlrpc.php requests globally on Plesk

Create a new file called: /etc/httpd/conf.d/xmlrpc.conf with this content in it:

<Files xmlrpc.php>
order deny,allow
deny from all
</Files>

Then restart the web server. Now your host will not have to deal with the many automated xmlrpc exploit attempts it receives.

Leave a Reply

Your email address will not be published. Required fields are marked *