If not, then I believe https://www.ads-software.com/plugins/block-bad-queries/ will help mitigate that.
]]>This was actually addressed in WordPress 4.7.1 https://www.ads-software.com/news/2017/01/wordpress-4-7-1-security-and-maintenance-release/ but that of course doesn’t stop bots from trying.
Have you tried the plugin mentioned earlier?
]]>