DDoS / Brute-Force over XML-RPC – How to disable commonly abused functions in WordPress
XML-RPC is a function in WordPress that allows for remote procedure calls to the application, such as for APIs and other automated tasks. Unfortunately, the way it is implemented in WordPress makes it easy for this feature to be abused and used to perform DDoS attacks and brute-force attacks (brute-forcing your own WordPress site a [...]