I was dealing with a WordPress site and the user wished to use Ulysses which is a macOS-based writing app to write and post to their WordPress blog.
When they tried to add their site to Ulysses, they received the following error.
You can also test XML RPC using the following tool, which you can self-host or find someone who has self-hosted it.
Just be cautious about using real usernames and passwords as the person hosting it might save these and use them maliciously. I used this site for testing.
However, I used a random username and password “test/test”. When using the tool on sites that worked with Ulysses, there was no error message. But this particular site showed the following error on the xml-rpc-validator
The site in question was hosted on Siteground, and from what I can tell they don’t block XML-RPC. They do include a file
/var/lib/sec/wp-settings.php in the
wp-config.php that has some XML-RPC throttling. But that’s it.
After disabling all the plugins on the site, and enabling them one after another. I found that a helper plugin called “Penci Shortcodes & Performance” for the installed theme “Soledad” was the culprit. Penci is the company and Soledad is the theme.
If you go under “Speed Optimization->General & Lazyload” you’ll find the “Remove XML-RPC and RSD Link” option.
Turning this off solved the problem.
You might find that some plugins do more than what they advertise. So it’s always good to go through their code or google further.
Hope this helps!