To disable XML-RPC with WP Ghost, follow these steps:
- Login to Your WordPress Dashboard
- Once logged in, go to the WP Ghost > Change Paths > API Security section.
- Switch on the Disable XML-RPC access option to block the access to /xmlrpc.php path and prevent Brute Force attacks.
- Click the Save button to apply the changes.

Disabling XML-RPC helps to prevent brute force attacks, pingback abuse, and other potential security vulnerabilities related to this protocol.