WordPress: XML-RPC server accepts POST requests only (xmlrpc.php)
You opened xmlrpc.php in a browser (GET) — it’s an API endpoint, not a page. Heavy POST traffic to it usually means brute-force bots.
Exact message you may see
XML-RPC server accepts POST requests only
Seen on:
WordPress
Meaning
XML-RPC serves old apps/Jetpack/pingbacks. Bots abuse it for password guessing (system.multicall) and DDoS pingbacks. If you don’t need it, block it.
Common causes
- Visiting xmlrpc.php directly (expected message)
- Bot traffic hammering xmlrpc.php
- Jetpack/mobile app requiring it
⚡ Quick fix
- Ignore the message if you opened it in a browser
- Block xmlrpc.php at the web server if unused
- Use security plugins to limit XML-RPC
Detailed fix by platform
Apache
- apache
<Files xmlrpc.php> Require all denied </Files>
Nginx
location = /xmlrpc.php { deny all; }
How to diagnose
- Traffic — Requests to xmlrpc.php in access logs
- Usage — Jetpack/app needs it?
🔧 Still not fixed?
Many errors look alike. If the steps above didn’t solve it, one of these is probably what you’re facing:
Similar errors
Most viewed in WordPress
- Critical error WordPress: There Has Been a Critical Error on This Website
- There was an error trying to send your message Contact Form 7: There was an error trying to send your message. Please try again later.
- Call to undefined function create_function() WordPress on PHP 8: Fatal error: Uncaught Error: Call to undefined function create_function() / each()
Other ways to find it
Where this error sits
Origin: Application & API. Errors that are often confused with or caused by this one (click to open):
🧠 Still stuck? Analyze your error
Paste the full message, response headers or stack trace — we'll detect the platform and point to the most likely cause.
💬 What worked for others
No tips yet — did something else fix this for you?
Share what worked for you
Tips are checked by an editor before they appear. Links are removed.
Did this fix work for you?
Report a correction or suggest an improvement
Last updated 15 Oct 2026