News:

The anti-spam plugins have stopped being effective. Registration is back to requiring approval. After registering, you must ALSO email me with your username, so that I can manually approve your account.

Main Menu

WordPress xmlrpc.php is now blocked

Started by Xepher, February 01, 2025, 12:33:01 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

Xepher

Several sites were being massively hammered by attacks focused on the obsolete xmlrpc.php interface to WordPress. That file is now blocked server wide, and cpu use fell from 80% to 1%.

More info can be found here: https://www.hostinger.com/tutorials/xmlrpc-wordpress

I don't believe anyone was legitimately using this feature. If I'm wrong about that, please contact me and we can look into solutions.

In the meantime, please, please update your WordPress installs (and keep them up to date!)