A lightweight plugin to disable XML-RPC, restrict the REST API, and hide the WordPress version.
Alternatives to Version Cloak
Plugins below are selected for functional relevance and current directory signals. Active-install counts do not affect this ranking.
Relevant replacements
WordPress plugins with similar use cases
Compatibility and update metadata provide context, not a quality guarantee. Review each plugin’s details for your site.
Maasters Security Shieldv1.1.6
Practical WordPress hardening with configurable security headers, CSP modes, login rate limiting, XML-RPC controls, and version hiding.
Lightweight attack detection for WordPress. Logs brute force, XML-RPC abuse, SQL injection, XSS attempts and more. No bloat, no blocking — just data.
Decoded Site Diagnosticsv1.0.0
Understand your WordPress health, performance, security and WP-Cron status with clear, actionable explanations.
Metadas Version Removalv1.1.1
A lightweight, zero configuration plugin that removes all WordPress version output from your site for improved security and cleaner markup.
Block comment spam, disable XML-RPC, restrict the REST API, stop user enumeration and block IPs, without a heavy security suite.
Lock down the WordPress comment attack surface with layered protections while preserving existing comment data.
WT Hardeningv1.0.7
WordPress hardening without touching your theme: XML-RPC, user enumeration, login limiter, security headers, strong passwords, event log.
Open24 Securityv1.4.1
Security hardening for WordPress and WooCommerce: lock down the REST API and login, limit admin accounts, get alerts and detect modified files.
Flex Website Securityv1.2.4
Practical WordPress hardening: login limits, XML-RPC, headers, enumeration protection, and more.