About

Wordpress supports the xml-rpc protocol, which is a way for third party software to communicate with the WP admin, for instance to create or delete posts. The protocol is a favourite target of hackers.

Wordpress supports the xml-rpc protocol, which is a way for third party software to communicate with the WP admin, for instance to create or delete posts. The ability to write to the database through the protocol often attracts the attention of hackers.

Therefore, there is some discussion whether it is wise to keep the protocol enabled. Many plugins, such as Automattic's own Jetpack, however, rely heavily on the protocol. This may lead to conflicts between security plugins and others.

history | excerpt history