Why You Really Should Disable XML-RPC Right Now
If you are seeing a weird spike in failed login attempts or your server is crawling for no apparent reason, it's probably time to disable xmlrpc and see if that clears things up. Honestly, for most modern WordPress users, this old feature is a bit like a dusty back door that you forgot to lock, and unfortunately, hackers are really good at finding those doors. ...