Is xmlrpc.php file necessary for wordpress?

[josephjohnson]

When I checking on google, there is a mixed response for this file.

What is your opinion about xmlrpc file. Should I keep it or remove it?

[p44]

@josephjohnson

Is up to you: if you need xmlrpc you keep, if you don't need, you can disable...

Different Wordpress security plugins let you disable to keep Wordpress instance more secure.

[josephjohnson]

@p44 thanks for your reply. let me check

[p44]

@josephjohnson Ok, here you can find different solution on how to disable, if you don't need Xmlrpc: https://www.wpbeginner.com/plugins/how-to-disable-xml-rpc-in-wordpress/#xml-rpc-disable-htaccess

[jdaviescoates]

@p44 said in Is xmlrpc.php file necessary for wordpress?:

Wordpress security plugins let you disable to keep Wordpress instance more secure.

I highly recommend installing WordFence on every single WordPress install.

[p44]

@jdaviescoates said in Is xmlrpc.php file necessary for wordpress?:

I highly recommend installing WordFence on every single WordPress install.

@jdaviescoates Very good advice They keep secured all Wordpress instances, even before of owner plugin updates, when they find any threat.