How to Disable xmlrpc.php in WordPress (And Why You Should)
Every WordPress installation ships with a file called xmlrpc.php in its root directory, enabled by default. I see it abused in server logs constantly. It is a legacy remote procedure call endpoint, introduced before the REST API existed. Back then, [...]