block xmlrpc in nginx

server {
    location = /xmlrpc.php {
        deny all;
    }
}

For roots bedrock:

server {
  location = /wp/xmlrpc.php {
    deny all;
  }
}

Add your comment