EU Data

XML-RPC is a communication protocol that allows the WordPress CMS to communicate with external web and mobile applications. Since WordPress introduced the REST API , XML-RPC is used much less than it used to be. However, some people still use it to launch powerful attacks on WordPress sites. This is because XML-RPC technology allows attackers to send requests containing hundreds of commands, making it easy to perform brute force attacks. XML-RPC is also less secure office 365 database than REST because its requests contain authentication credentials that can be exploited. If you are not using XML-RPC, you may want to disable the xmlrpc.php file. First, check if your site is using this file. Paste your URL into this XML-RPC validator to check if your site is using this protocol. If not, the easiest way to disable this file is with a plugin like Disable XML-RPC-API. Your WordPress security plugin may also be able to do this for you.

Consider deleting the default WordPress administrator account
We've already discussed changing the "admin" username for the default WordPress admin account, but if you want to take things a step further, get rid of that default account and create a new account with the same admin privileges. This step is worth taking if you think your original admin username and password have been discovered.