Disable XML

In functions.php

add_filter( 'xmlrpc_enabled', '__return_false' );
add_filter( 'wp_headers', 'FastWP_remove_x_pingback' );
 function FastWP_remove_x_pingback( $headers )
 {
 unset( $headers['X-Pingback'] );
 return $headers;
 }


In .htaccess:

<Files xmlrpc.php>
 Order Deny,Allow
 Deny from all
 </Files>