Wordpress - disable login password autocomplete (PCI compliance)

disable-password-autocomplete.php

<?php
/**
 * Plugin Name: Disable login autocomplete
 * Description: Disable login password autocomplete
 * Version: 1.0
 * Author: Benjamin Uzelac
 * Author URI: https://buzelac.com
 * License: WTFPL
 */

add_action( 'login_init', 'acme_autocomplete_login_init' );
function acme_autocomplete_login_init() {
    ob_start();
}

add_action( 'login_form', 'acme_autocomplete_login_form' );
function acme_autocomplete_login_form() {
    $content = ob_get_contents();
    ob_end_clean();

    $content = str_replace('id="user_pass"', 'id="user_pass" autocomplete="off"', $content);

    echo $content;
}