Blockinator lets you disable the XMLRPC script.
You can use blockinator to remove these scripts from your source code of Wordpress:
- xmlrpc
- version numbers from script url
- shortlinks
- links to feeds
- dns prefetch option
From your WordPress Dashboard
- Visit “Plugins” → Add New
- Search for Blockinator
- Activate Blockinator from your Plugins page.
From
WordPress.org
- Download Blockinator
- Upload the “blockinator” directory to your “/wp-content/plugins/” directory, using ftp, sftp, scp etc.
- Activate Blockinator from your Plugins page.