Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Deprecate support for XML-RPC #35

Closed
markkap opened this issue Sep 2, 2018 · 0 comments
Closed

Deprecate support for XML-RPC #35

markkap opened this issue Sep 2, 2018 · 0 comments
Milestone

Comments

@markkap
Copy link

@markkap markkap commented Sep 2, 2018

XML-RPC is abused by brute force attackers which effectively DDOS sites even if they do not use them.
There are all kinds of statistics about the actual use of XML-RPC in the wild, but probably the best way to see if people actually need it is by removing it.

Original plan was to move the functionality to a core plugin, but since wordpress 5.6 has application passwords which are equivalent to how XML-RPC passed user and password as part of the message, the "REST API" can provide the same features as XML-RPC and there is no real reason to keep supporting it.

@markkap markkap added this to the 1.0.0 milestone Oct 13, 2018
markkap added a commit that referenced this issue May 13, 2019
markkap added a commit that referenced this issue May 13, 2019
markkap added a commit that referenced this issue May 13, 2019
@markkap markkap changed the title Deprecate support for XML-RPC, move into core plugin Deprecate support for XML-RPC Sep 24, 2021
@markkap markkap closed this in 3aa624b Sep 24, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Linked pull requests

Successfully merging a pull request may close this issue.

None yet
1 participant