FAQ

...default, WordPress allows unlimited login attempts with any of these methods: login form, XML-RPC request, or by sending special cookies. This allows passwords to be cracked with relative ease via...