What XML-RPC does, when integrations need it and how to make a deliberate decision about its status.
Why this check matters
XML-RPC supports older remote publishing and some integrations. It is also a surface worth reducing when a site has no use for it.
How to review it
- List services that publish or manage the site remotely.
- Check whether the integration uses XML-RPC or the REST API instead.
- Disable XML-RPC only after testing those workflows.
- Monitor logs for failed clients after the change.
Keep the change safe
Do not disable a required integration without a replacement. The correct setting depends on how the site is operated.
How WPVitals uses this signal
WPVitals checks this setting locally and reports the result in the WordPress dashboard. The check is a maintenance signal, so review the site context before changing a setting and test the visitor experience afterwards.