FALKEN'S MAZE / CHECKS / XML-RPC
XML-RPC
What Joshua checks
Checks whether xmlrpc.php is reachable.
Why it matters
XML-RPC enables password guessing in bulk and pingback abuse.
How to fix it
Block xmlrpc.php unless an app such as Jetpack needs it.
In the Maze Score
- Worth
- 5 points (half for a warning)
- Severity
- Medium
- Runs on
- Plans with the Plugin Recon add-on
Related checks
- WordPress core versionPlugin Recon
- Plugin versionsPlugin Recon
- User enumerationPlugin Recon
- Theme versionsPlugin Recon
- Known vulnerabilitiesPlugin Recon
- Exposed filesPlugin Recon
- PHP and WordPress settingsPlugin Recon
- Abandoned pluginsPlugin Recon
- Login protectionPlugin Recon
How does your domain do? Scan it free and get a Maze Score in about a minute.