Is Prefect…Almost

Before using this plug-in, my WordPress was getting hit every day with multiple attempted logins. I have 2FA active, so I know that they wouldn’t get in, still, the daily emails from WordFence were annoying.

After installing the plug-in, it worked great, except that I still got maybe one attempt every few days, which was puzzling as I expected zero attempts. It turns out that there’s a side entrance to logging in via xml-rpc: It bypasses the usual login pages. Look up online about disabling xml-rpc on WordPress if you still get the occasional login attempt after using this plug-in.

• This topic was modified 3 months ago by Jon Guild.