Skip to main content

Questions tagged [xml-rpc]

Wordpress supports the xml-rpc protocol, which is a way for third party software to communicate with the WP admin, for instance to create or delete posts. The protocol is a favourite target of hackers.

Filter by
Sorted by
Tagged with
1 vote
1 answer
197 views

XMLRPC error: xmlrpc.client.Fault: <Fault -32700: 'parse error. not well formed'>

Just downloaded wordpress latest, using LAMP (Apache2/MariaDB and PHP8.2) and curling it returns this curl http://localhost:80/wordpress/xmlrpc.php; echo XML-RPC server accepts POST requests only. ...
Machinexa's user avatar
  • 121
0 votes
0 answers
97 views

XMLRPC System Multicall and BruteForce

So when we perform the brute force in XMLRPC using the wp.getUserBlogs, while we have user but not the corresponding password. It says that there is implemented method where system.multicall allows ...
Harshwardhan Niture's user avatar
0 votes
0 answers
25 views

Wordress Get All Categories using xmlrpc is not working

I am trying to get WordPress categories using XML-RPC method and it's working fine on my local as well as sandbox environment but not on production. I am using c# for the same and here is the code. ...
Ashif Husain's user avatar
1 vote
1 answer
253 views

Disable XML-RPC via snippet

I am testing disabling XML-RPC on WP 6.2.2 via the following snippet: add_filter('xmlrpc_enabled', '__return_false'); But that isn't working. I can still access xmlrpc.php fine. I tried to add it in ...
Xhuljano Llapushi's user avatar
0 votes
1 answer
31 views

Is XML-RPC still a security risk?

Is XML-RPC still a security risk? Should it always be disabled if there is no use case for it? Let's say starting at WP Version 5.9.1.
mmcglynn's user avatar
  • 386
0 votes
1 answer
396 views

How do I disable XML-RPC in WordPress Multisite?

I have tried a couple of go-to plugins, but I still get a response from XML-RPC. Is there something specific that needs to be done in a multisite installation? Plugins tested: Disable XML-RPC Pingback ...
mmcglynn's user avatar
  • 386
0 votes
0 answers
353 views

Can I disable xml-rpc by setting it to false?

I've been searching about it and came across with this snippet code, will it disable safely the xml-rpc? // set below line to false in /public_html/xmlrpc.php ... define( 'XMLRPC_REQUEST', true ); ......
SeyyedKhandon's user avatar
1 vote
1 answer
555 views

XMLRPC filtering through htaccess not working

My websites are hosted on a shared instance. They face regular xmlrpc DDoS. I've tried to put in place several mitigation practices to block those attacks : Installed a dedicated extension that ...
PaKempf's user avatar
  • 11
0 votes
0 answers
123 views

Azure WordPress deny access to xmlrpc

I am trying to disable xmlrpc.php by using a plugin and also by using .htaccess. But it doesn't seem to be working, when I hit example.com/xmlrpc.php I still get the following: XML-RPC server accepts ...
Syed Abu Hamza's user avatar
3 votes
0 answers
2k views

Block only external access to wp-cron.php on OpenLiteSpeed

I use OpenLitespeed server with multiple Wordpress installation and want to restrict external access to some files, only allowing server itself to access them (for example to call cron), so: What I ...
Sailorrr's user avatar
0 votes
1 answer
317 views

XMLRPC won't connect?

I am using the latest version of Wordpress and trying to run a simple PHP script to create a wordpress post but unfortunately it isn't working. I am using Cloudflare plus have a webhost that is ...
AAA's user avatar
  • 125
1 vote
1 answer
700 views

How to stop xmlrpc attacks without disabling component to allow JetPack to work in WordPress?

I manage a WordPress website using an virtual machine in the cloud, and lately, I noticed a lot of unwanted requests to the xmlrpc.php component that are slowing down the site causing high CPU loads. ...
mhweb's user avatar
  • 65
0 votes
1 answer
73 views

Avoid duplicate posts with xml rpc

I'm new to Wordpress and I'm not a developer. I'm running an IFTT applet that posts a WordPress post each time I upload a new video on my Youtube Channel. There is a bug with IFTT. It often posts the ...
Sylvainn's user avatar
0 votes
1 answer
158 views

Regular XML-RPC timeouts

I am hoping to get some tips for troubleshooting this annoying timeout issue. Configuration: Windows 2012 R2 with IIS PHP 7.3 MySQL 5.7 Wordpress.org 5.3.2 WP is configured as network with 5 ...
anachostic's user avatar
0 votes
2 answers
311 views

How To Post WordPress Custom Post Types to Twitter via IFTTT

I have my wordpress site. Which has the normal "post" and a custom post type "download", I Currently use IFTTT, (If This Then That Service) to post my wordpress posts to Twitter. The IFTTT recipe ...
Aditya Agarwal's user avatar
0 votes
1 answer
288 views

Cannot save underscore custom fields in one wordpress installation using xmlrpc and underscores

I have a local installation of wordpress for testing and a production server. I use XMLRPC to create custom posts with custom fields and everything works flawlessly on my local installation BUT it ...
fpilee's user avatar
  • 101
1 vote
3 answers
10k views

How to enable xmlrpc in WordPress 5?

How can I enable xmlrpc in WordPress 5? I followed some tutorials related to this topic, but I didn't find the check box in the Settings writhing panel. I got 403 Forbidden Access after every request....
alpha.romeo's user avatar
0 votes
0 answers
3k views

"XML-RPC server accepts POST requests only" error message

When I load my site without www I get the error message: "XML-RPC server accepts POST requests only." but when I use www. then it loads fine... I have googled it, checked youtube for hours but can't ...
Olivier's user avatar
2 votes
2 answers
3k views

Simply deleting XMLRPC file

I have never used XMLRPC for any activity for my WordPress sites and also not going to do so. There are many articles on disabling XMLRPC on your site for additional security. In the use case ...
Rajesh Kakkad's user avatar
1 vote
1 answer
4k views

xmlrpc.php Returning 405 Response Code

I hope someone might be able to help with this. A week ago we had a severe drop in rankings on the home page only. When I went to Google Search Console a new error was reported 2 days before the drop. ...
user2868832's user avatar
1 vote
1 answer
545 views

How to block XML-RPC attack?

Using Apache Web Server For blocking xmlrpc, adding this code into .htaccess file <Files xmlrpc.php> order allow,deny deny from all </Files> But while adding this The domain being ...
Mourin Bably's user avatar
0 votes
1 answer
504 views

New post created with XML-RPC works fine but fails to assign category

I am creating WordPress post from my desktop using xmlrpc. Everything else (e.g. title, description, custom_fields) except category is working fine. The category is not assigning to the post. So far ...
Bips's user avatar
  • 1
0 votes
1 answer
402 views

Queries take 120+ seconds on my large Wordpress site

i have a couple of Wordpress website running on a VPS, each one of them has 1M+ posts. When adding new posts queries just hangs for a long time until the website crashes. I use XML-RPC to post to my ...
Raz Zelinger's user avatar
2 votes
2 answers
1k views

How to disable XML-RPC from Linux command-line in a total way?

I read near the end of this guide regarding utilizing SSHguard to protect WordPress from Brute force attacks that after configuring SSHguard the relevant way, one must: disable XML-RPC by blocking ...
Arcticooling's user avatar
0 votes
1 answer
936 views

XMLRPC pingback.extensions.getPingbacks not work with parameters

I want to use the pingback.extensions.getPingbacks Method with parameters in the url, like post_type or page. I use the code below, but it doesn't work when I want to add a parameter and I get a fault ...
user104787's user avatar
3 votes
1 answer
3k views

How Enable XML-RPC in WP 4.8.2

How Can Enable XML in Version 4.8.2 ? I Want Enable XML RPC Then Connected to it with Programming library thx i can not connect to xml-rpc with https://github.com/abrudtkuhl/WordPressSharp WordPress ...
adel's user avatar
  • 41
1 vote
0 answers
65 views

modify post meta data remotely without xmlrpc

I want to make changes to post meta data from another server and had used xml-rpc. After some security concerns were raised, I disabled xmlrpc. I do not have remote access to the MySQL database. I ...
washingon's user avatar
  • 113
0 votes
1 answer
246 views

Tagging posts to custom taxonomies using XMLRPC in R

I'm using R to upload posts onto Wordpress using XML-RPC using the newPost function from the RWordpress package. The function call I'm using is: newPost( content = list( description = ...
Clement Tan's user avatar
0 votes
2 answers
2k views

How to edit feature image with XML RPC?

I can't find any information anywhere about what data I need to give exactly. When I try to read the data from one of my posts with a thumbnail already I get this but there's not way you have to enter ...
cooldude101's user avatar
0 votes
1 answer
618 views

Using the GetMediaLibrary() method in python-wordpress-xmlrpc.media, how to iterate over the result?

I accessed my Wordpress site's media library using the GetMediaLibrary() method of the python-wordpress-xmlrpc.media module. According to the documentation, this action should return a list of ...
user avatar
1 vote
1 answer
58 views

Manipulating/view postmeta remotely

I'm new to WordPress development. I'm using a plugin, "Tribe Events," that stores event venues and organizers associated with an event in the wp_postmeta table and I want to be able to easily access ...
StevieD's user avatar
  • 211
0 votes
1 answer
518 views

Getting all posts from an XMLRPC request [duplicate]

I'm using the XMLRPC::Lite module fetch posts from my website like so: #!/usr/bin/perl use XMLRPC::Lite; my $result = XMLRPC::Lite->proxy('http://example.com/xmlrpc.php) ->call('wp.getPosts'...
StevieD's user avatar
  • 211
0 votes
1 answer
951 views

not well-formed (invalid token) at line 15, column 51, byte 720 when trying to parse XMLRPC call

I'm running WP 4.7.4. The site is a default site with no plugins activated other than the default plugins. I'm using the WordPress::XMLRPC Perl module to generate a getPost XMLRPC call for post #1 ...
StevieD's user avatar
  • 211
1 vote
0 answers
208 views

XMLRPC slow and weird websites/services

I have a relatively new wordpress setup ~1mth old after installing NewRelic, I notice it tells me XMLRPC.php is causing slowdown. When I looked at the details I notice its connecting to some weird ...
Jiew Meng's user avatar
  • 1,911
7 votes
2 answers
2k views

Is there a way to get protected meta fields through any of the available built-in WordPress APIs? (xmlrpc, wp-json)

WordPress has several APIs build in: XML-RPC REST API by default they don't return custom post types or protected meta keys. I want to access the protected meta fields of a plugin. I tried to ...
samy's user avatar
  • 121
1 vote
1 answer
227 views

XML-RPC errors they know my username?

I have noticed a lot of XML-RPC authentication failures to my blog site. This can be normal and idiots attempting to crack a wordpress site but what is worrying is that the username being shown in the ...
Junaid's user avatar
  • 113
0 votes
0 answers
154 views

XML-RPC aplication blocked by the hosting

Currently I own several developments in C# in .Net. These applications frequently updates information in WordPress using XML-RPC. The aim of these developments is to update information in an ...
jpussacq's user avatar
  • 169
2 votes
1 answer
1k views

Create a new post in wordpress with XML-RPC with the correct GUID?

When I use XML-RPC to create a new post instead of wp_insert_post the post is created with wrong guid/URL. With XML-RPC the guid is created with ID not slug. // Input data $my_page = array(); $...
Torre's user avatar
  • 31
0 votes
1 answer
171 views

API WordPress is Limited? Return False

We are migrating a school library repository to the CMS WordPress and so make it public and accessible to society. All items are scanned and available for up to WordPress via API wp.uploadFile wp....
user2847391's user avatar
4 votes
1 answer
1k views

PHP XMLRPC for WordPress: Adding meta tags and description

I have been trying to add WordPress posts by XMLRPC calls. The code is working but the tags and categories are not setting. I have tried almost every solution provided in every forum. PS: I am ...
user509505's user avatar
3 votes
1 answer
682 views

Removing unnecessary wordpress files

I want to consider removing the next <link> files from the <head> section of my website: ...wp-json ...xmlrpc.php?rsd ...wlwmanifest.xml But I don't really know how would this may affect ...
uhrr's user avatar
  • 33
1 vote
1 answer
459 views

Turn off Admin Bar (Toolbar) in backend - no easy way

I'm working on a theme for the back end Admin pages, this is for a custom web application built on WP. After studying admin-bar.php and the function is_admin_bar_showing() for a few minutes I decided ...
C C's user avatar
  • 1,948
0 votes
1 answer
171 views

Checking for origin of a xmlrpc request

I have webapp A (running wordpress) talking to webapp B (running on Java, no wordpress or php). B issues xmlrpc requests to A over https. In order to secure the xmlrpc endpoint on A I'd like to ...
Eleco's user avatar
  • 101
5 votes
2 answers
25k views

How do I know if my site is using the xmlrpc.php file?

I have taken over a website where I work that was developed by a previous employee, it seems that recently this site has been the victim of a string of DDoS attacks through the use of the xmlrpc ...
LewisJWright's user avatar
0 votes
1 answer
237 views

<script> tag is ignored when using xml-rpc

I create post using xml-rpc, in post_content I post HTML, in HTML I have js code. But after post is created in editor I don't see <script type="text/javascript"> tag. How I can fix it? Example ...
pasha's user avatar
  • 101
5 votes
2 answers
435 views

Does blocking xmlrpc.php affect pinging update services like pingomatic

Because there are a lot of attacks lately on xmlrpc.php, I want to block access to this file or disable it. I am aware some remote updating functions won't work (like the mobile app) but that doesn't ...
Diego Voors's user avatar
2 votes
3 answers
808 views

Attach to wp-login.php and xmlrpc.php

I am receiving many requests to my wp-login.php and xmlrpc file, now I just set up an htaccess to prevent requests to xmlrpc, but how do you suggest me to block wp-login? thanks
Sam Provides's user avatar
  • 1,195
33 votes
9 answers
39k views

Best way to eliminate xmlrpc.php?

What is a best way to eliminate xmlrpc.php file from WordPress when you don't need it?
prosti's user avatar
  • 4,293
3 votes
1 answer
4k views

Disable links in header (feeds and such)

I want to disable feeds and things like that (rpc, pingbacks, wlwmanifest, prev/next). Reason is that the website is not a blog, so these are of no use. I wrote the following in a plugin: ...
Mat's user avatar
  • 189
0 votes
0 answers
354 views

XMLRPC: How to retrieve possible custom fields for a new post?

I'm planning to implement certain XMLRPC elements in my external web application. If I'm passing wp.newPost as the method, how can I get the possible custom_fields? I don't have access to the ...
zerohedge's user avatar
  • 101