You can now easily enable or disable the following WordPress functions with this plugin to strengthen it agains attacks (please note that the plugin is German only so far!):
REST API for all
REST API for guests
XML RPC
Disable file editor
Redirect to home after wrong password (to confuse script-kiddies)
Hide WordPress Generator