WordPress Xmlrpc Vulnerability and Solution

WordPressThere is a vulnerability present in . Xmlrpc.php Attacks can be carried out through the file. Normally, only POST If data is sent via this file, this file can be used for malicious purposes. DDoS attacks can be carried out.

To see if it's open, go to a URL on your site like this: “www.yoursite.com/xmlrpc.php”If you get a result like the image below, it means you have this vulnerability.

To close this gap, .htaccess Simply add the following codes to your file.

# Begin Protect xmlrpc RedirectMatch 403 /xmlrpc.php # End Protect xmlrpc.php