Comments on: xmlrpc.php: What Is It in WordPress and Why Disable It

By: Vakarė

Vakarė — Fri, 04 Feb 2022 16:14:46 +0000

In reply to Eran.

Happy it worked out for you, Eran!

By: Eran

Eran — Wed, 26 Jan 2022 13:05:34 +0000

I got a message from my server (Siteground) that this file contains malicious information, so I reached your article and quickly manually disabled it.

Thanks!

By: Vakarė

Vakarė — Tue, 19 Oct 2021 14:02:16 +0000

In reply to Muzammil.

Happy to hear you were able to resolve it!

By: Muzammil

Muzammil — Sun, 17 Oct 2021 14:23:59 +0000

Thanks a lot. My site was having lot of attempt login on XML RPC and your post has help a lot now. Much Appreciated.

By: Vakarė

Vakarė — Tue, 21 Sep 2021 06:35:42 +0000

In reply to Jen.

Hi Jen, wishing you all the best in battling those bad guys!
Keep us updated on how it goes 🙂

By: Jen

Jen — Thu, 16 Sep 2021 06:11:02 +0000

I am hoping that you just solved an extremely infuriating issue for this old school designer. I started noticing strange traffic and abnormal bandwidth issues on my site and was very surprise to find all the PHP files hosted all over multiple WP sites. Sadly the hi jacked pages get more traffic than any of my sites ever do – they are mainly for small businesses. I decided to clean them up manually which turned into something I had to schedule weekly because no matter how much I secured my site, these pages were still showing up.

Tonight as I was cleaning it up, I searched Xmlrpc.php to see if it was a part of the word press install or just one more file that they have added. I came across this aticle and promptly went and added the code to all of my .htaccess files. Only time will tell. Now I need to go develop an exciting 404 page for all this search engine traffic I get from my hijacked site.

I had never seen it before but keep good tabs on my site stats so the URLs and traffic are all well documented.

By: Sally G.

Sally G. — Sat, 21 Aug 2021 21:05:14 +0000

Thanks for this! One of my sites has been getting a lot of xmlrpc.php SPAM comments and I just did the check and I will be turning off xmlrpc.php. My second site is newer, has not yet been attacked so strongly, but I am fixing that as well.

Thank you so much for this information!

By: Bruce Thomson

Bruce Thomson — Fri, 04 Jun 2021 03:49:36 +0000

Thanks for this. Someone managed to crash my site using this, so I have now disabled it.

By: Denise

Denise — Thu, 20 May 2021 19:11:15 +0000

Thanks so much for the info. My site has been getting hit with a barrage of phishing via xmlrpc. I have been wasting time everyday deleting and monitoring and…..
I added the code using .htaccess file. Keeping my fingers crossed that I will see this issue end.