by kurs mediasystems on WordPress.org
This plugin lets you to strengthen your WordPress by deactivating unused functions that might be a security risk.

screenshot-1.png
You can now easily enable or disable the following WordPress functions with this plugin to strengthen it agains attacks (please note that the plugin is German only so far!):
REST API for all
REST API for guests
XML RPC
Disable file editor
Redirect to home after wrong password (to confuse script-kiddies)
Hide WordPress Generator