<Files xmlrpc.php>
Order Allow,Deny
Deny from all
</Files>
htacces içine koy
admine saldırı varsada
https://wordpress.org/plugins/wps-limit-login/
eklentiyi kullan

https://wordpress.org/plugins/disable-xml-rpc-api/