We should disable the unused APIs WordPress makes available publicly such as XML-RPC and the REST JSON API.
Created attachment 416553 [details] Patch
Verified plugin to be working on UAT server.
<rdar://problem/72675391>
Committed r271176: <https://trac.webkit.org/changeset/271176> All reviewed patches have been landed. Closing bug and clearing flags on attachment 416553 [details].