Discover more from Learn Pentesting like a Pro!

Stay updated on the latest cybersecurity insights from Cloud and Mobile to Blockchain. (HUNDREDS OF SUBSCRIBERS)

How to fix Wordpress XML-RPC Cyberattacks

Mar 3, 2021

turned-on monitor — Photo by Stephen Phillips - Hostreviews.co.uk on Unsplash

To be protected against this cyber attack, do not forget to restrict access to /xmlrpc.php resource only from your IP address (1.2.3.4 in the example below).

For Apache, edit /.htaccess file to add:

<Files "xmlrpc.php"> 
   order deny,allow 
   deny from all 
   allow from 1.2.3.4 
</Files>

Save the changes, restart apache and ready!