From Dev.to
How to Disable XML-RPC in WordPress Without Breaking Anything
XML-RPC is an old remote-access door into WordPress, a single file called xmlrpc.php in your site root. It has been switched on by default for years, and most sites have never used it. Security guides...