Disable XML-RPC to prevent your site from attacks
I pretty sure that you all have seen the file name xmlrpc.php in the root folder of WordPress source pack. XML-RPC is a script that was set in active as default since WordPress version 3.5. It
Get Your WordPress Restored After It Was Attacked
You’re running a WordPress site and you think your site is clean and unhackable. Maybe, but unhackable site doesn’t exist. You someday may found that your site – somehow – has been infected by malware
