Disable WordPress XML-RPC in NGINX

Locate your nginx configuration file and add the following rule in there.

location = /xmlrpc.php {
    deny all;
}

Save it and reload the nginx service.

Now the user will get a 403 Forbidden response.