Both WordPress and Drupal include XML-RPC in their core build ... Further, it should be filed under “more bang for the buck”: Only one machine needed to exploit this vulnerability. “Simply put, with a ...

XML-RPC for PHP is a version of the protocol written in PHP and used by many Web applications. The ISC began receiving reports of attempts to exploit a known hole in some versions of XML-RPC for ...

The attack exploited the XML-RPC protocol the sites running WordPress ... abuse the internet's time-synchronisation protocol and exploit open domain name system servers to amplify traffic.

XML-RPC, Saltstack, ThinkPHP, and Drupal Ajax. “Based on the binaries we have seen and the time when we have seen them, we found that the threat actor is constantly updating its exploit arsenal ...