diff --git a/v2-http3/WordPress/WordPress b/v2-http3/WordPress/WordPress
index 0ed92c4..52d9ecf 100644
--- a/v2-http3/WordPress/WordPress
+++ b/v2-http3/WordPress/WordPress
@@ -31,6 +31,10 @@ server {
     deny all;
   }
 
+  location = /xmlrpc.php {
+    deny all;
+  }
+
   location ~/(wp-admin/|wp-login.php) {
     #auth_basic "Restricted Area";
     #auth_basic_user_file /home/site-user/.htpasswd;
diff --git a/v2-varnish/WordPress/WordPress b/v2-varnish/WordPress/WordPress
index 6318b1c..a929c33 100644
--- a/v2-varnish/WordPress/WordPress
+++ b/v2-varnish/WordPress/WordPress
@@ -27,6 +27,10 @@ server {
     deny all;
   }
 
+  location = /xmlrpc.php {
+    deny all;
+  }
+
   location ~/(wp-admin/|wp-login.php) {
     #auth_basic "Restricted Area";
     #auth_basic_user_file /home/site-user/.htpasswd;
diff --git a/v2/WordPress/WordPress b/v2/WordPress/WordPress
index 556dd3d..7958c4b 100644
--- a/v2/WordPress/WordPress
+++ b/v2/WordPress/WordPress
@@ -23,6 +23,10 @@ server {
 
   {{settings}}
 
+  location = /xmlrpc.php {
+    deny all;
+  }
+
   try_files $uri $uri/ /index.php?$args;
   index index.php index.html;