Crafting Web Experiences

WordPress Security & Hardening

Disable XML-RPC on WordPress
April 10, 2026
Source: Disable XML-RPC on WordPress (github.com)
Remove the WordPress Version
April 10, 2026
Source: Remove WordPress Version Number (github.com)
Custom login error messages
April 10, 2026
Source: Hide Login Errors on WordPress (github.com)
Disable WordPress REST API on WordPress
April 10, 2026
Source: Disable WordPress REST API on WordPress (github.com)
Disable Login by Email on WordPress
April 10, 2026
Source: Disable Login by Email on WordPress (github.com)
Block default endpoint users
April 10, 2026
Hide Gravity Forms uploads from users without login
April 10, 2026
Encrypt automatically all file paths to wp-content/uploads on WordPress pages
April 10, 2026
Change default error message on login
April 10, 2026
Prevent Theme and Plugin Installation/Update
March 2, 2024