From 3a4c8f9f220aad4be521766fc488533d8b4b0635 Mon Sep 17 00:00:00 2001
From: Simon <s.thiessen@local-it.org>
Date: Mon, 20 Jul 2026 16:39:44 +0200
Subject: [PATCH] block XML-RPC

---
 htaccess.tmpl | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/htaccess.tmpl b/htaccess.tmpl
index 376a8a7..c2f8c81 100644
--- a/htaccess.tmpl
+++ b/htaccess.tmpl
@@ -60,3 +60,8 @@ RewriteRule . index.php [L]
 
 # END WordPress Multisite
 {{- end }}
+
+# Block XML-RPC
+<Files xmlrpc.php>
+    Require all denied
+</Files>