Blockinator lets you disable the XMLRPC script.
You can use blockinator to remove these scripts from your source code of WordPress: – xmlrpc – version numbers from script url – shortlinks – links to feeds – dns prefetch option
