Security Knowledge Base
Best practice guides, vulnerability analysis, and defense strategies for WordPress security. Continuously updated to help you build a safer website.
XML-RPC
What Is XML-RPC in WordPress? Why You Should Disable It
If you've ever run a security scan on your WordPress site — say, using a tool like FunSentry — you may have seen a warning flag next to something called XML-RPC. The recommendation is almost always the same: disable it. But what exactly is XML-RPC? Why does WordPress include it? And why do security professionals…
February 18, 2026
Free Security Scan
Check your WordPress site's security posture — it only takes 30 seconds.
Scan My Site NowTags