Skip to content
XML-RPCTECHNICZNE
TechnicalHow it works under the hood

XML-RPC

XML Remote Procedure Call

An older WordPress interface that allows publishing and managing content from external programs — without logging into the admin panel.

Why it matters

Convenient entry point for bots: enables guessing passwords in bulk per request and mass publishing, bypassing admin panel security.

What's missing without it

When enabled but unused, XML-RPC leaves an open backdoor that goes unnoticed — posts made through it don't appear in the admin panel history.

When it is used

Check during every WordPress audit. Today, it is replaced by the REST API.

How we use it

File `xmlrpc.php`. If unused, block it in server configuration: `location = /xmlrpc.php { deny all; }`.

Numbers worth knowing

Technical in data

65%

Odsetek ankietowanych Polaków deklarujących korzystanie z narzędzi AI według raportu „E-commerce w Polsce 2026”

IAB Polska2026Poland

470 000 000 000

IDC Worldwide AI and Generative AI Spending Guide 2026 V2 prognozuje, że europejskie wydatki na AI osiągną blisko 470 mld dolarów do 2030 roku

IDC09/2026Europe

470 000 000 000

Prognozowane całkowite wydatki na AI w Europie w 2030 roku według IDC Worldwide AI and Generative AI Spending Guide 2026 V2

IDC09/2026Europe

Figures from the same field — collected in our market data base.

Related terms