Why should xmlrpc.php be deleted?

Deleting xmlrpc.php can prevent attackers from remotely injecting malicious xml. The deletion method is to find and open the WordPress root directory, and then directly delete the xmlrpc.php file.

Recommended: "PHP Video Tutorial"

WordPress There is a DoS denial of service vulnerability, it is recommended to delete xmlrpc.php in the root directory

Affected version:

WordPress 3.9.x-3.9.1
WordPress 3.8.x-3.8.3
WordPress 3.7.x-3.7.3
WordPress 3.6.x
WordPress 3.5.x

Vulnerability description:

There is no limit on the number of parameters in xml, As a result, attackers can remotely inject malicious XML, directly causing a denial of service attack on the target server. );

2. Upgrade WordPress to the latest version.

The above is the detailed content of Why should xmlrpc.php be deleted?. For more information, please follow other related articles on the PHP Chinese website!