Secure WordPress XML-RPC, Elementor & CORS

We are looking for an experienced WordPress developer or website security specialist to fix three security findings

1. Restrict WordPress XML-RPC

Disable XML-RPC or restrict access appropriately, based on the site's requirements.
Verify that the endpoint is no longer exposed to the reported security risk.
Share screenshots of the changes made

2. Update Outdated Elementor Components

Update Elementor and Elementor Pro to secure, compatible versions.
Test the website after updating, including page layouts, forms, responsive views and existing functionality.
Resolve any compatibility issues introduced by the updates.

3. Correct CORS Configuration

Restrict cross-origin access to explicitly approved origins.
Ensure that arbitrary origins are not reflected in the Access-Control-Allow-Origin header when credentials are allowed.
Share screenshots of the changes made
Test the endpoint with both approved and unapproved origins and document the results