To prevent xmlrpc attack in WordPress website just add below code to the .htaccess file of the user domain - Redirect 301 /xmlrpc.php http://127.0.0.1 Hope this article helps!