I had this problem.
Decision:
plugin “iThemes Security”: enable setting (allow) “WordPress Tweaks” => “WordPress’ XML-RPC feature allows hundreds of username and password guesses per request. Use the recommended “Block” setting below to prevent attackers from exploiting this feature.”
If you disabled REST API in function.php: delete the lines in function.php:
remove_action( ‘init’, ‘rest_api_init’ );
remove_action( ‘rest_api_init’, ‘rest_api_default_filters’, 10, 1 );
remove_action( ‘parse_request’, ‘rest_api_loaded’ );
Now my problem is solved.
-
This reply was modified 7 years, 5 months ago by VIKTAR.